last executing test programs: 2m43.434991607s ago: executing program 4 (id=240): r0 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x4040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x0) write(r1, &(0x7f0000004200)='t', 0x1) sendfile(r1, r0, 0x0, 0x3ffff) sendfile(r1, r0, 0x0, 0x7ffff000) 2m42.278939991s ago: executing program 4 (id=256): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f0000000000)) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f00000001c0)) ioctl$SNDCTL_DSP_CHANNELS(r0, 0xc0045006, &(0x7f00000024c0)=0x78) ioctl$SNDCTL_DSP_GETOPTR(r0, 0x800c5012, &(0x7f0000000300)) 2m42.129699286s ago: executing program 4 (id=259): r0 = socket$rds(0x15, 0x5, 0x0) pipe2$watch_queue(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$RTC_EPOCH_READ(r1, 0x8008700d, &(0x7f0000000040)) prctl$PR_SET_MM_EXE_FILE(0x23, 0xd, r0) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f0000000280)=0x1, 0x4) 2m41.915765135s ago: executing program 4 (id=263): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) mount$nfs4(&(0x7f0000000040)='/', &(0x7f0000000080)='./file0\x00', 0x0, 0x197841, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r0, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) 2m41.699817169s ago: executing program 4 (id=266): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000340), 0x48980, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000000c0)=0xf) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$TCFLSH(r1, 0x400455c8, 0x20000000009) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000200)=0x6) 2m41.243102267s ago: executing program 4 (id=274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f0000000ac0)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) syz_genetlink_get_family_id$ethtool(0x0, r0) fallocate(r0, 0x40, 0xfa5f, 0xffffffff) 2m40.947678913s ago: executing program 32 (id=274): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$selinux_enforce(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) writev(r1, &(0x7f0000000ac0)=[{&(0x7f0000002500)='\f7', 0x2}], 0x1) syz_genetlink_get_family_id$ethtool(0x0, r0) fallocate(r0, 0x40, 0xfa5f, 0xffffffff) 2m34.367824745s ago: executing program 2 (id=318): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0_vlan\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@dev={0xfe, 0x80, '\x00', 0x40}, @remote, @remote, 0x3, 0x2, 0x5, 0x400, 0xb7, 0x2520062, r2}) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa"], 0x0) 2m34.218690143s ago: executing program 2 (id=321): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000011008108090f9becdb4cb92e264831371900000069bd6efb2502eaf60d002700020400bf050005001201", 0x2e}], 0x1}, 0x0) 2m33.843806967s ago: executing program 2 (id=326): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x0) setresuid(r0, r0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 2m32.671739091s ago: executing program 2 (id=338): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000440)='./file0/file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$fuse(0x0, &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x80000, &(0x7f0000000700)={{}, 0x2c, {'rootmode', 0x3d, 0x4000}}) 2m32.439408958s ago: executing program 2 (id=341): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)='g', 0x1}], 0x1}, 0x0) recvmmsg$unix(r0, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x10120, 0x0) 2m31.989806071s ago: executing program 2 (id=343): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb188a8", 0x18, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 2m31.62184354s ago: executing program 33 (id=343): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan1\x00', 0x0}) sendto$packet(r1, &(0x7f0000000180)="02030e00d3fc02000000ab5d71acedd7c9560385dcb188a8", 0x18, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 1m14.682827749s ago: executing program 5 (id=1086): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/time_for_children\x00') 1m5.840766338s ago: executing program 5 (id=1086): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/time_for_children\x00') 1m1.124941571s ago: executing program 1 (id=1303): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x8, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='kmem_cache_free\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = dup2(r1, r1) faccessat2(r2, &(0x7f0000000880)='\x00', 0x1, 0x1100) 1m0.587849475s ago: executing program 1 (id=1304): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0x0) 51.609783612s ago: executing program 5 (id=1086): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/time_for_children\x00') 49.974382451s ago: executing program 1 (id=1304): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0x0) 37.136696417s ago: executing program 1 (id=1304): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0x0) 36.171807508s ago: executing program 5 (id=1086): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/time_for_children\x00') 23.171928759s ago: executing program 0 (id=1542): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x6, 0x4, &(0x7f0000002180)=ANY=[@ANYBLOB="180200000000000000000000cfffffff850000001700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth0_to_bond\x00', 0x0}) r3 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r0, r2, 0x25, 0x4, @val=@tracing={0x0, 0x20000000}}, 0x1c) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x11, 0x5, &(0x7f00000001c0)=ANY=[@ANYBLOB="180200000000000000000000000000001800000008000000000000006e14000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000140)={r3, r4}, 0x5) 23.01546012s ago: executing program 0 (id=1545): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x800448f0, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x9, 0xfc}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000040)="05000000010000", 0x7) syz_clone(0x2020100, 0x0, 0x0, 0x0, 0x0, 0x0) 22.654837383s ago: executing program 0 (id=1548): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=r2, @ANYBLOB="0200"], 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r0, 0x2, 0x0, 0x7, &(0x7f0000002b00)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 22.471964748s ago: executing program 0 (id=1551): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000400)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1b32, 0x4) sendto$inet(r0, &(0x7f0000000540)='v', 0x1, 0x4040, 0x0, 0x0) recvmmsg(r0, &(0x7f0000000300)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001200)=""/25, 0xfe65}, 0xde6c}], 0x1, 0x40012002, 0x0) 22.3657324s ago: executing program 1 (id=1304): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0x0) 21.470162225s ago: executing program 5 (id=1086): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/time_for_children\x00') 19.863867575s ago: executing program 0 (id=1557): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xff58}}}}}, 0x0) 9.944813096s ago: executing program 1 (id=1304): r0 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000100), 0x2) r1 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) ftruncate(r1, 0xffff) fcntl$addseals(r1, 0x409, 0x7) r2 = ioctl$UDMABUF_CREATE(r0, 0x40187542, &(0x7f0000000140)={r1, 0x0, 0x0, 0x4000}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x13, r2, 0x0) 8.296326864s ago: executing program 0 (id=1557): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000003d40), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000380)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x20, 0xfc, 0x2, 0x0, @empty, @multicast1=0xe0000300}, @echo_reply={0x0, 0x0, 0x0, 0x64, 0xff58}}}}}, 0x0) 7.315506678s ago: executing program 5 (id=1086): r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) syz_usb_disconnect(0xffffffffffffffff) syz_open_procfs$namespace(r0, &(0x7f00000000c0)='ns/time_for_children\x00') 3.280085315s ago: executing program 6 (id=1652): pipe2$watch_queue(&(0x7f0000001180)={0xffffffffffffffff}, 0x80) r1 = add_key(&(0x7f0000000000)='id_resolver\x00', &(0x7f0000000100)={'syz', 0x3}, &(0x7f0000000080)="f8", 0x1, 0xfffffffffffffffe) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r0, 0x0) pipe2$watch_queue(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) keyctl$KEYCTL_WATCH_KEY(0x20, r1, r2, 0x81) keyctl$setperm(0x5, r1, 0x10) 3.263704357s ago: executing program 6 (id=1653): r0 = creat(&(0x7f0000000080)='./bus\x00', 0x0) close(r0) r1 = socket$tipc(0x1e, 0x5, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) mount$9p_fd(0x0, &(0x7f00000006c0)='./bus\x00', &(0x7f00000000c0), 0x0, &(0x7f0000000280)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 3.176848968s ago: executing program 6 (id=1654): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000600)={{0x12, 0x1, 0x0, 0x1d, 0x91, 0x67, 0x20, 0x174f, 0x6a31, 0x263f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x83, 0x3c, 0x8f}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.948653106s ago: executing program 3 (id=1655): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000900", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c0002800800040000000000060006"], 0x4c}}, 0x0) 2.392521406s ago: executing program 3 (id=1656): r0 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r1 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r1, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r1, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r0, 0xc02064b6, &(0x7f00000002c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_SETCRTC(r0, 0xc06864a2, &(0x7f0000000580)={0x0, 0x0, r3, r4, 0x4, 0x0, 0xffffffff, 0x804, {0xac7a, 0x1, 0x3, 0x67, 0xf4b, 0x1, 0x2, 0x5, 0x0, 0xe154, 0x1000, 0x7f, 0x6, 0xffffffff, "fe1d00003413000000000020b42717e47f00"}}) 2.227881444s ago: executing program 3 (id=1657): r0 = landlock_create_ruleset(&(0x7f0000000040)={0x0, 0x1, 0x1}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2a4c0, 0x0) r1 = landlock_create_ruleset(&(0x7f0000000040)={0x4080, 0x3, 0x1}, 0x18, 0x0) landlock_restrict_self(r1, 0x0) creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) 2.202522875s ago: executing program 3 (id=1658): r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000100)={@multicast2, @loopback}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r1, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010000000004"], 0x57) 1.980920557s ago: executing program 3 (id=1659): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42f82, 0x0) ioctl$SNDCTL_DSP_SPEED(r0, 0xc0045002, &(0x7f0000000180)) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) write$dsp(r0, &(0x7f0000000200)="dce480febb0ccd0bcb66ade3495e87b440e5afdc984cc06eb1c91c85a7fec04b2f82e267c1edd1543b79d80c0f949073bdbaa464c040e61ea6e658101100101097a5821b6c0c79d177b96995281707ce6d20a6db", 0x54) write$dsp(r0, &(0x7f0000000080)="cd", 0x1) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) 1.092311486s ago: executing program 3 (id=1660): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) r1 = syz_usb_connect(0x0, 0x2d, &(0x7f00000004c0)={{0x12, 0x1, 0x141, 0x30, 0xf5, 0x69, 0x20, 0x5ac, 0x219, 0xf072, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x55, 0x7, 0x1, 0x3, 0x49, 0x2, 0x0, [], [{{0x9, 0x5, 0x82, 0x3, 0x400, 0x0, 0x33, 0x81}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r1, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000180)={0x40, 0xc, 0x8, "61bcc4b3b6ade544"}, 0x0, 0x0}) syz_usb_ep_write$ath9k_ep1(r1, 0x82, 0x40, &(0x7f00000000c0)=ANY=[]) syz_usb_control_io(r1, 0x0, 0x0) 825.466699ms ago: executing program 6 (id=1661): syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x0) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7734, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x15523ea56aa22b9a, 0x0, 0x0, 0x0, 0x12345}) io_uring_enter(r0, 0x97e, 0x0, 0x63, 0x0, 0x0) 204.392338ms ago: executing program 6 (id=1662): r0 = openat$selinux_load(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) r1 = openat$selinux_policy(0xffffff9c, &(0x7f0000001040), 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x12, r1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) write$selinux_load(r0, &(0x7f0000000000)=ANY=[], 0x2000) 0s ago: executing program 6 (id=1663): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000400)=ANY=[@ANYBLOB="12013f00000000407f04ffff000000000001090224000100000000090400001503000000092140000001220f00090581", @ANYRES8], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000b00)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB="00000f00000009003d140f3c369197d09647190890"], 0x0, 0x0, 0x0, 0x0}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xd01c4813, &(0x7f0000000000)={0x2, 0x0, 0x0, 0x5, 0xfffffffd}) kernel console output (not intermixed with test programs): [ T5813] Bluetooth: hci2: command tx timeout [ 186.963034][ T9775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.999390][ T9775] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.017018][ T9775] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.026227][ T9775] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.035816][ T9775] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 187.248518][ T6630] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.248538][ T6630] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.268923][ T9985] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1241'. [ 187.480156][ T9985] bond0 (unregistering): Released all slaves [ 187.580143][ T6638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 187.604774][ T6638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.780550][ T9999] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1244'. [ 188.215727][ T30] audit: type=1400 audit(1751069972.358:4445): avc: denied { mounton } for pid=10011 comm="syz.6.1250" path="/190/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.253394][ T30] audit: type=1400 audit(1751069972.358:4446): avc: denied { read } for pid=10011 comm="syz.6.1250" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.294917][ T30] audit: type=1400 audit(1751069972.358:4447): avc: denied { open } for pid=10011 comm="syz.6.1250" path="/190/file0" dev="overlay" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.329713][ T30] audit: type=1400 audit(1751069972.358:4448): avc: denied { read } for pid=10011 comm="syz.6.1250" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.394598][ T30] audit: type=1400 audit(1751069972.368:4449): avc: denied { read } for pid=10011 comm="syz.6.1250" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 188.418927][ T30] audit: type=1400 audit(1751069972.468:4450): avc: denied { unmount } for pid=7072 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 188.461449][ T5857] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 188.483264][ T59] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.625652][ T59] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.679991][ T5857] usb 4-1: config 0 has an invalid interface number: 98 but max is 0 [ 188.698929][ T5857] usb 4-1: config 0 has no interface number 0 [ 188.708055][ T5857] usb 4-1: config 0 interface 98 has no altsetting 0 [ 188.726410][ T5857] usb 4-1: New USB device found, idVendor=1110, idProduct=9024, bcdDevice=db.24 [ 188.737035][ T5857] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 188.754361][ T5857] usb 4-1: Product: syz [ 188.763830][ T5857] usb 4-1: Manufacturer: syz [ 188.769844][ T5857] usb 4-1: SerialNumber: syz [ 188.778543][ T5857] usb 4-1: config 0 descriptor?? [ 188.803195][ T59] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.004808][ T5857] usb 4-1: [ueagle-atm] ADSL device founded vid (0X1110) pid (0X9024) Rev (0XDB24): Eagle II [ 189.033614][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 189.047812][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 189.057840][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 189.067433][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 189.078067][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 189.113679][ T59] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.423741][ T59] bridge_slave_1: left allmulticast mode [ 189.429441][ T59] bridge_slave_1: left promiscuous mode [ 189.436477][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.449440][ T59] bridge_slave_0: left allmulticast mode [ 189.455951][ T59] bridge_slave_0: left promiscuous mode [ 189.462139][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.763730][ T5874] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 189.830393][ T5857] usb 4-1: [ueagle-atm] pre-firmware device, uploading firmware [ 189.855589][ T5857] usb 4-1: [ueagle-atm] loading firmware ueagle-atm/eagleII.fw [ 189.863954][ T43] usb 4-1: Direct firmware load for ueagle-atm/eagleII.fw failed with error -2 [ 189.874647][ T43] usb 4-1: Falling back to sysfs fallback for: ueagle-atm/eagleII.fw [ 189.901954][ T5857] usb 4-1: USB disconnect, device number 21 [ 189.931515][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 189.940338][ T5874] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 189.950069][ T5874] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 189.996289][ T5874] usb 1-1: config 0 has no interface number 0 [ 190.014434][ T5874] usb 1-1: New USB device found, idVendor=1a86, idProduct=752d, bcdDevice=2d.4d [ 190.034432][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 190.091142][ T5874] usb 1-1: Product: syz [ 190.095375][ T5874] usb 1-1: Manufacturer: syz [ 190.099975][ T5874] usb 1-1: SerialNumber: syz [ 190.147402][ T5874] usb 1-1: config 0 descriptor?? [ 190.183740][ T5874] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 190.240191][ T5874] snd-usb-audio 1-1:0.1: probe with driver snd-usb-audio failed with error -2 [ 190.318793][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 190.401119][ T5939] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 190.430228][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 190.443480][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.453302][ T59] bond0 (unregistering): Released all slaves [ 190.485213][ T2147] usb 1-1: USB disconnect, device number 22 [ 190.593608][ T5939] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 190.613952][T10041] chnl_net:caif_netlink_parms(): no params data found [ 190.615186][ T5939] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 190.689452][T10093] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1278'. [ 190.699363][ T5939] usb 7-1: config 0 descriptor?? [ 190.715398][ T5939] cp210x 7-1:0.0: cp210x converter detected [ 191.137550][ T5939] cp210x 7-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 191.161231][ T5817] Bluetooth: hci2: command tx timeout [ 191.189814][ T59] hsr_slave_0: left promiscuous mode [ 191.229643][ T59] hsr_slave_1: left promiscuous mode [ 191.252251][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.259685][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.300313][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.318434][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.355203][ T59] veth1_macvtap: left promiscuous mode [ 191.369190][ T59] veth0_macvtap: left promiscuous mode [ 191.391557][ T5939] usb 7-1: cp210x converter now attached to ttyUSB0 [ 191.421388][ T59] veth1_vlan: left promiscuous mode [ 191.426756][ T59] veth0_vlan: left promiscuous mode [ 191.639130][ T2147] usb 7-1: USB disconnect, device number 15 [ 191.666949][ T2147] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 191.832132][ T2147] cp210x 7-1:0.0: device disconnected [ 191.865908][ T5939] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 192.017163][T10130] fanotify: failed to encode fid (type=0, len=0, err=-2) [ 192.078394][ T5939] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 192.103186][ T5939] usb 1-1: config 0 has no interface number 0 [ 192.109459][ T5939] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 192.125238][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.141876][ T5939] usb 1-1: config 0 descriptor?? [ 192.160245][ T5939] cp210x 1-1:0.1: cp210x converter detected [ 192.421412][ T30] audit: type=1400 audit(1751069976.558:4451): avc: denied { load_policy } for pid=10138 comm="syz.6.1293" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 192.428679][T10139] SELinux: failed to load policy [ 192.569859][ T5939] cp210x 1-1:0.1: failed to get vendor val 0x000e size 3: -32 [ 192.796113][ T59] team0 (unregistering): Port device team_slave_1 removed [ 192.799366][ T5939] usb 1-1: cp210x converter now attached to ttyUSB0 [ 192.912655][ T59] team0 (unregistering): Port device team_slave_0 removed [ 192.985351][ T30] audit: type=1400 audit(1751069977.118:4452): avc: denied { write } for pid=10161 comm="syz.1.1302" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 193.021104][ T2147] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 193.037884][ T5939] usb 1-1: USB disconnect, device number 23 [ 193.061674][ T5939] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 193.093827][ T5939] cp210x 1-1:0.1: device disconnected [ 193.213834][ T2147] usb 7-1: config 0 has an invalid interface number: 41 but max is 0 [ 193.230778][ T2147] usb 7-1: config 0 has no interface number 0 [ 193.243919][ T5817] Bluetooth: hci2: command tx timeout [ 193.250737][ T2147] usb 7-1: config 0 interface 41 has no altsetting 0 [ 193.268211][ T2147] usb 7-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 193.278363][ T2147] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 193.287099][ T2147] usb 7-1: Product: syz [ 193.291338][ T2147] usb 7-1: Manufacturer: syz [ 193.295983][ T2147] usb 7-1: SerialNumber: syz [ 193.304764][ T2147] usb 7-1: config 0 descriptor?? [ 193.499678][T10041] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.510327][T10041] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.534813][T10041] bridge_slave_0: entered allmulticast mode [ 193.548040][T10041] bridge_slave_0: entered promiscuous mode [ 193.560843][T10041] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.569717][T10041] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.583683][T10041] bridge_slave_1: entered allmulticast mode [ 193.592364][T10041] bridge_slave_1: entered promiscuous mode [ 193.679640][T10041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.705025][T10041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.807442][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.814119][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.855950][T10041] team0: Port device team_slave_0 added [ 193.915325][T10041] team0: Port device team_slave_1 added [ 194.084005][T10041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.107613][T10176] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 194.110281][T10041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.150097][T10041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.152211][ T2147] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 194.174914][T10041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.182981][T10041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.210030][T10041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.259866][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 194.270331][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 194.292936][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 194.302678][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 194.321228][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 194.374603][ T59] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.435885][ T2147] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 194.448378][ T2147] CoreChips 7-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 194.471447][ T2147] CoreChips 7-1:0.41: probe with driver CoreChips failed with error -71 [ 194.497429][ T2147] usb 7-1: USB disconnect, device number 16 [ 194.534553][ T59] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.560387][T10041] hsr_slave_0: entered promiscuous mode [ 194.569986][T10041] hsr_slave_1: entered promiscuous mode [ 194.580518][T10041] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.596853][T10041] Cannot create hsr debugfs directory [ 194.638233][ T59] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.651552][ T10] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 194.730932][ T59] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.811967][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 194.824615][ T10] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 194.844560][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 194.854296][ T10] usb 1-1: Product: syz [ 194.858663][ T10] usb 1-1: Manufacturer: syz [ 194.864650][ T10] usb 1-1: SerialNumber: syz [ 194.890414][ T10] usb 1-1: config 0 descriptor?? [ 195.142546][ T10] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 195.335967][ T5813] Bluetooth: hci2: command tx timeout [ 195.730660][ T59] bond1 (unregistering): (slave bridge2): Releasing active interface [ 195.741046][ T59] bridge2 (unregistering): left promiscuous mode [ 195.747417][ T59] bridge2 (unregistering): left allmulticast mode [ 195.775778][ T59] bond1 (unregistering): Released all slaves [ 195.795308][T10181] chnl_net:caif_netlink_parms(): no params data found [ 195.829907][T10216] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.980703][T10216] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.117863][T10216] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.140852][ T10] gspca_sunplus: reg_w_riv err -71 [ 196.146897][ T10] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 196.163496][ T10] usb 1-1: USB disconnect, device number 24 [ 196.230648][T10216] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.313522][T10181] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.331124][T10181] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.338345][T10181] bridge_slave_0: entered allmulticast mode [ 196.362229][T10181] bridge_slave_0: entered promiscuous mode [ 196.371947][ T5813] Bluetooth: hci4: command tx timeout [ 196.391151][ T59] hsr_slave_0: left promiscuous mode [ 196.397350][ T59] hsr_slave_1: left promiscuous mode [ 196.414781][ T59] veth1_macvtap: left promiscuous mode [ 196.420512][ T59] veth0_macvtap: left promiscuous mode [ 197.201084][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 197.364137][ T10] usb 1-1: Using ep0 maxpacket: 32 [ 197.396915][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 197.408040][ T5813] Bluetooth: hci2: command tx timeout [ 197.417486][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 197.433989][ T10] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 197.443177][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 197.476765][ T10] usb 1-1: config 0 descriptor?? [ 197.485142][T10181] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.486796][ T10] hub 1-1:0.0: USB hub found [ 197.505839][T10181] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.515294][T10181] bridge_slave_1: entered allmulticast mode [ 197.523263][T10181] bridge_slave_1: entered promiscuous mode [ 197.703082][T10181] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.710862][ T10] hub 1-1:0.0: 1 port detected [ 197.746945][T10216] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.787880][T10181] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.836453][T10216] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.877348][T10181] team0: Port device team_slave_0 added [ 197.897581][T10181] team0: Port device team_slave_1 added [ 197.915907][T10216] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.940954][T10041] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 197.974416][T10216] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.988362][T10041] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 198.018791][ T59] IPVS: stop unused estimator thread 0... [ 198.028937][T10181] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.049621][T10181] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.117190][T10181] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 198.155724][T10181] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 198.174538][T10181] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.271175][T10181] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.301716][T10041] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 198.349544][T10041] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 198.356083][ T10] hub 1-1:0.0: activate --> -90 [ 198.461060][ T5813] Bluetooth: hci4: command tx timeout [ 198.770421][ T9] usb 1-1: USB disconnect, device number 25 [ 198.775359][T10181] hsr_slave_0: entered promiscuous mode [ 198.834119][T10181] hsr_slave_1: entered promiscuous mode [ 198.991270][ T10] usb 1-1-port1: config error [ 199.044535][ T30] audit: type=1400 audit(1751069983.188:4453): avc: denied { open } for pid=10292 comm="syz.3.1332" path="/dev/ptyqb" dev="devtmpfs" ino=130 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 199.122265][ T30] audit: type=1400 audit(1751069983.238:4454): avc: denied { ioctl } for pid=10292 comm="syz.3.1332" path="/dev/ptyqb" dev="devtmpfs" ino=130 ioctlcmd=0x5420 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 199.147425][ C0] vkms_vblank_simulate: vblank timer overrun [ 199.520083][T10041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 199.613970][ T30] audit: type=1400 audit(1751069983.758:4455): avc: granted { setsecparam } for pid=10306 comm="syz.6.1338" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 199.615017][T10041] 8021q: adding VLAN 0 to HW filter on device team0 [ 199.654431][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 199.661595][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 199.679334][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 199.686535][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 200.209561][T10329] block device autoloading is deprecated and will be removed. [ 200.383628][T10181] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 200.458518][T10041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 200.484430][T10181] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 200.521134][ T5813] Bluetooth: hci4: command tx timeout [ 200.526609][T10181] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 200.622195][T10181] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 200.812951][T10181] 8021q: adding VLAN 0 to HW filter on device bond0 [ 200.845114][T10181] 8021q: adding VLAN 0 to HW filter on device team0 [ 200.874085][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.881298][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 200.930533][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.937752][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.159334][T10041] veth0_vlan: entered promiscuous mode [ 201.194290][T10041] veth1_vlan: entered promiscuous mode [ 201.284892][T10041] veth0_macvtap: entered promiscuous mode [ 201.310715][T10041] veth1_macvtap: entered promiscuous mode [ 201.345033][T10385] loop6: detected capacity change from 0 to 7 [ 201.367902][T10385] Dev loop6: unable to read RDB block 7 [ 201.378538][T10041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 201.393618][T10385] loop6: unable to read partition table [ 201.404883][T10385] loop6: partition table beyond EOD, truncated [ 201.421128][T10385] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 201.444330][T10041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 201.462723][T10041] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.512076][T10041] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.552845][T10041] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.571907][T10041] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.600666][T10181] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.748284][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.793857][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.806760][T10181] veth0_vlan: entered promiscuous mode [ 201.849586][T10181] veth1_vlan: entered promiscuous mode [ 201.924587][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.957203][T10181] veth0_macvtap: entered promiscuous mode [ 201.963352][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.990690][T10181] veth1_macvtap: entered promiscuous mode [ 202.042737][T10181] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.066768][T10181] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.106263][T10181] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.116004][T10181] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.125109][T10181] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.134169][T10181] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.161536][ T5936] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 202.238250][ T30] audit: type=1400 audit(1751069986.378:4456): avc: denied { map } for pid=10408 comm="syz.3.1358" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 202.261936][ C0] vkms_vblank_simulate: vblank timer overrun [ 202.299991][ T30] audit: type=1400 audit(1751069986.418:4457): avc: denied { execute } for pid=10408 comm="syz.3.1358" path="/dev/dri/card0" dev="devtmpfs" ino=627 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 202.334329][ T5936] usb 1-1: Using ep0 maxpacket: 8 [ 202.372591][ T5936] usb 1-1: New USB device found, idVendor=2770, idProduct=930c, bcdDevice=8d.6a [ 202.393273][ T5936] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 202.426670][ T5936] usb 1-1: Product: syz [ 202.430926][ T5936] usb 1-1: Manufacturer: syz [ 202.457778][ T5936] usb 1-1: SerialNumber: syz [ 202.481866][ T5936] usb 1-1: config 0 descriptor?? [ 202.500431][ T5936] gspca_main: sq930x-2.14.0 probing 2770:930c [ 202.608991][ T5813] Bluetooth: hci4: command tx timeout [ 202.757677][ T6631] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.805765][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 202.861090][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 202.933843][ T5936] gspca_sq930x: ucbus_write failed -71 [ 202.940583][ T5936] sq930x 1-1:0.0: probe with driver sq930x failed with error -71 [ 202.982875][ T5936] usb 1-1: USB disconnect, device number 26 [ 203.008728][ T6631] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.054629][ T6640] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.073211][ T6640] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.125400][ T6631] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.420883][ T6631] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.570407][T10446] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1360'. [ 203.845846][ T6631] bridge_slave_1: left allmulticast mode [ 203.861480][ T6631] bridge_slave_1: left promiscuous mode [ 203.867246][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.924225][ T6631] bridge_slave_0: left allmulticast mode [ 203.941264][ T6631] bridge_slave_0: left promiscuous mode [ 203.948376][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.132054][ T5817] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 204.142888][ T5817] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 204.153788][ T5817] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 204.163834][ T5817] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 204.182619][ T5817] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 204.841053][ T30] audit: type=1400 audit(1751069988.978:4458): avc: denied { read } for pid=10478 comm="syz.0.1367" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 204.885815][ T30] audit: type=1400 audit(1751069988.978:4459): avc: denied { open } for pid=10478 comm="syz.0.1367" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 205.096384][ T5874] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 205.109223][ T5817] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 205.125036][ T5817] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 205.139722][ T5817] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 205.152835][ T5817] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 205.160517][ T6631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.170907][ T5817] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 205.191592][ T6631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.207674][ T6631] bond0 (unregistering): Released all slaves [ 205.263145][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 205.295885][ T5874] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 205.361202][ T5874] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 205.370288][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.431562][ T5874] usb 1-1: config 0 descriptor?? [ 205.456344][ T5874] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input35 [ 205.665775][ T30] audit: type=1400 audit(1751069989.808:4460): avc: denied { write } for pid=10478 comm="syz.0.1367" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 205.786276][ T5169] bcm5974 1-1:0.0: could not read from device [ 205.814873][ T5874] bcm5974 1-1:0.0: could not read from device [ 205.833302][ T24] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 205.854244][ T5169] bcm5974 1-1:0.0: could not read from device [ 205.870905][ T6631] hsr_slave_0: left promiscuous mode [ 205.878956][ T5874] input: failed to attach handler mousedev to device input35, error: -5 [ 205.893536][ T6631] hsr_slave_1: left promiscuous mode [ 205.906071][ T5169] bcm5974 1-1:0.0: could not read from device [ 205.923439][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.931659][ T5874] usb 1-1: USB disconnect, device number 27 [ 205.950190][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.958305][ T5169] bcm5974 1-1:0.0: could not read from device [ 205.989891][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 206.007092][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.019797][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 206.040753][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 206.056777][ T24] usb 4-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 206.074096][ T6631] veth1_macvtap: left promiscuous mode [ 206.079655][ T6631] veth0_macvtap: left promiscuous mode [ 206.085636][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.094163][ T6631] veth1_vlan: left promiscuous mode [ 206.099485][ T6631] veth0_vlan: left promiscuous mode [ 206.107033][ T24] usb 4-1: config 0 descriptor?? [ 206.283810][ T5817] Bluetooth: hci2: command tx timeout [ 206.486564][ T30] audit: type=1326 audit(1751069990.618:4461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242fd8e929 code=0x7ffc0000 [ 206.510293][ T30] audit: type=1326 audit(1751069990.618:4462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242fd8e929 code=0x7ffc0000 [ 206.545355][ T30] audit: type=1326 audit(1751069990.618:4463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f242fd8e929 code=0x7ffc0000 [ 206.548470][ T24] cm6533_jd 0003:0D8C:0022.0016: unknown main item tag 0x0 [ 206.574477][ T30] audit: type=1326 audit(1751069990.618:4464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242fd8e929 code=0x7ffc0000 [ 206.602200][ T5936] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 206.625669][ T30] audit: type=1326 audit(1751069990.618:4465): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242fd8e929 code=0x7ffc0000 [ 206.647207][ T24] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:0D8C:0022.0016/input/input36 [ 206.690078][ T30] audit: type=1326 audit(1751069990.618:4466): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f242fd8e929 code=0x7ffc0000 [ 206.703607][ T24] cm6533_jd 0003:0D8C:0022.0016: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.3-1/input0 [ 206.776288][ T30] audit: type=1326 audit(1751069990.618:4467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10515 comm="syz.0.1374" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242fd8e929 code=0x7ffc0000 [ 206.831113][ T5936] usb 7-1: Using ep0 maxpacket: 8 [ 206.856051][ T5936] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 206.856869][ T5857] usb 4-1: USB disconnect, device number 22 [ 206.866643][ T5936] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.889629][ T5936] usb 7-1: Product: syz [ 206.911307][ T5936] usb 7-1: Manufacturer: syz [ 206.916014][ T5936] usb 7-1: SerialNumber: syz [ 206.936624][ T5936] usb 7-1: config 0 descriptor?? [ 207.023085][ T6631] team0 (unregistering): Port device team_slave_1 removed [ 207.091589][ T6631] team0 (unregistering): Port device team_slave_0 removed [ 207.169011][ T5936] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 207.248217][ T5813] Bluetooth: hci4: command tx timeout [ 207.645621][T10485] chnl_net:caif_netlink_parms(): no params data found [ 207.810694][T10464] chnl_net:caif_netlink_parms(): no params data found [ 207.968769][T10485] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.984902][T10485] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.000254][T10485] bridge_slave_0: entered allmulticast mode [ 208.008737][T10485] bridge_slave_0: entered promiscuous mode [ 208.017229][T10485] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.025228][T10485] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.032890][T10485] bridge_slave_1: entered allmulticast mode [ 208.040362][T10485] bridge_slave_1: entered promiscuous mode [ 208.200907][T10485] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.226773][ T5936] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 208.245157][T10485] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.266563][ T5936] usb 7-1: USB disconnect, device number 17 [ 208.328632][T10564] veth1_macvtap: left promiscuous mode [ 208.342790][T10564] macsec0: entered promiscuous mode [ 208.348047][T10564] macsec0: entered allmulticast mode [ 208.361187][ T5813] Bluetooth: hci2: command tx timeout [ 208.361343][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058dd8800: rx timeout, send abort [ 208.381191][T10464] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.393468][T10464] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.400759][T10464] bridge_slave_0: entered allmulticast mode [ 208.408608][T10464] bridge_slave_0: entered promiscuous mode [ 208.426529][T10564] veth1_macvtap: entered promiscuous mode [ 208.432503][T10564] veth1_macvtap: entered allmulticast mode [ 208.438435][T10564] macsec0: left promiscuous mode [ 208.445507][T10564] macsec0: left allmulticast mode [ 208.450551][T10564] veth1_macvtap: left allmulticast mode [ 208.490406][ T6631] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.517440][T10464] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.525757][T10464] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.533474][T10464] bridge_slave_1: entered allmulticast mode [ 208.540781][T10464] bridge_slave_1: entered promiscuous mode [ 208.566557][T10485] team0: Port device team_slave_0 added [ 208.576197][T10485] team0: Port device team_slave_1 added [ 208.612204][ T6631] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.646157][T10464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.716587][ T6631] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.730479][T10464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.748960][T10485] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.759408][T10485] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.785320][ C1] vkms_vblank_simulate: vblank timer overrun [ 208.792219][T10485] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.820673][T10485] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.830072][T10485] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.860320][T10485] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.877032][ C1] vcan0: j1939_tp_rxtimer: 0xffff888058dd8800: abort rx timeout. Force session deactivation [ 208.955888][ T6631] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.080779][T10485] hsr_slave_0: entered promiscuous mode [ 209.098336][ T5813] Bluetooth: hci0: command 0x0405 tx timeout [ 209.144851][T10485] hsr_slave_1: entered promiscuous mode [ 209.152350][T10485] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.160776][T10485] Cannot create hsr debugfs directory [ 209.192057][T10464] team0: Port device team_slave_0 added [ 209.202749][T10464] team0: Port device team_slave_1 added [ 209.329867][ T5817] Bluetooth: hci4: command tx timeout [ 209.383537][T10464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 209.412878][T10464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.501213][T10464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 209.681555][T10464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 209.689548][T10464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 209.722288][T10464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 209.799847][T10589] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2157778563 (4315557126 ns) > initial count (1704523522 ns). Using initial count to start timer. [ 209.925017][T10464] hsr_slave_0: entered promiscuous mode [ 209.932716][T10464] hsr_slave_1: entered promiscuous mode [ 209.939931][T10464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 209.954235][T10464] Cannot create hsr debugfs directory [ 210.127493][T10594] 9pnet: p9_errstr2errno: server reported unknown error 1844674 [ 210.433156][ T6631] bridge_slave_1: left allmulticast mode [ 210.440972][ T6631] bridge_slave_1: left promiscuous mode [ 210.441376][ T5817] Bluetooth: hci2: command tx timeout [ 210.453159][ T6631] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.464610][ T6631] bridge_slave_0: left allmulticast mode [ 210.470262][ T6631] bridge_slave_0: left promiscuous mode [ 210.479302][ T6631] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.756615][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 210.756628][ T30] audit: type=1400 audit(1751069994.898:4479): avc: denied { setattr } for pid=10576 comm="syz.0.1390" name="NETLINK" dev="sockfs" ino=34042 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 210.941113][ T6631] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.964827][ T6631] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.975674][ T6631] bond0 (unregistering): Released all slaves [ 211.221207][T10622] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1405'. [ 211.389947][ T6631] hsr_slave_0: left promiscuous mode [ 211.401205][ T5817] Bluetooth: hci4: command tx timeout [ 211.414583][ T6631] hsr_slave_1: left promiscuous mode [ 211.430325][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.441190][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.465774][ T6631] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.488465][ T6631] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.516099][ T30] audit: type=1400 audit(1751069995.658:4480): avc: denied { connect } for pid=10631 comm="syz.0.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 211.555241][ T6631] veth1_macvtap: left promiscuous mode [ 211.564618][ T6631] veth0_macvtap: left promiscuous mode [ 211.570271][ T6631] veth1_vlan: left promiscuous mode [ 211.586051][ T30] audit: type=1400 audit(1751069995.718:4481): avc: denied { bind } for pid=10631 comm="syz.0.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 211.609127][ T6631] veth0_vlan: left promiscuous mode [ 211.615359][ T30] audit: type=1400 audit(1751069995.718:4482): avc: denied { listen } for pid=10631 comm="syz.0.1407" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 212.490240][ T6631] team0 (unregistering): Port device team_slave_1 removed [ 212.521145][ T5817] Bluetooth: hci2: command tx timeout [ 212.550651][ T6631] team0 (unregistering): Port device team_slave_0 removed [ 212.791316][ T5857] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 212.882545][T10653] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1412'. [ 212.968321][ T5857] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 213.021382][ T5857] usb 1-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 213.043448][ T5857] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 213.109584][ T5857] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c0c, bcdDevice= 0.00 [ 213.154320][ T5857] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.193357][T10485] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 213.200471][ T5857] usb 1-1: config 0 descriptor?? [ 213.329719][T10485] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 213.343906][T10485] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 213.371260][T10485] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 213.411897][T10677] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1417'. [ 213.479150][T10677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.481193][ T5817] Bluetooth: hci4: command tx timeout [ 213.604432][T10677] 8021q: adding VLAN 0 to HW filter on device bond1 [ 213.615804][T10677] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 213.630525][ T5857] corsair-psu 0003:1B1C:1C0C.0017: unknown main item tag 0x4 [ 213.639134][T10677] bond1: (slave vcan1): Error -95 calling set_mac_address [ 213.646966][ T5857] corsair-psu 0003:1B1C:1C0C.0017: item fetching failed at offset 1/3 [ 213.658066][ T5857] corsair-psu 0003:1B1C:1C0C.0017: probe with driver corsair-psu failed with error -22 [ 213.835151][ T2147] usb 1-1: USB disconnect, device number 28 [ 213.860365][T10485] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.926304][T10485] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.965061][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.972241][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.044612][ T714] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.051794][ T714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.107754][T10464] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 214.140491][T10464] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 214.205382][T10464] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 214.230237][T10464] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 214.469841][T10713] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1423'. [ 214.529278][T10713] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.645861][T10720] 8021q: adding VLAN 0 to HW filter on device bond1 [ 214.691931][T10720] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 214.743855][T10730] netlink: 'syz.3.1426': attribute type 1 has an invalid length. [ 214.745589][T10720] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 214.768662][T10730] netlink: 'syz.3.1426': attribute type 4 has an invalid length. [ 214.788973][T10730] netlink: 9462 bytes leftover after parsing attributes in process `syz.3.1426'. [ 214.916864][T10464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.982642][T10464] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.027181][ T714] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.034369][ T714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.065947][T10485] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.106382][ T714] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.113570][ T714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.218180][T10748] binder: 10747:10748 ioctl c0306201 2000000001c0 returned -22 [ 215.226191][ T5874] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 215.276105][T10485] veth0_vlan: entered promiscuous mode [ 215.290257][T10464] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.326890][T10485] veth1_vlan: entered promiscuous mode [ 215.392223][T10485] veth0_macvtap: entered promiscuous mode [ 215.415113][ T5874] usb 7-1: config 220 has an invalid interface number: 76 but max is 2 [ 215.416396][T10485] veth1_macvtap: entered promiscuous mode [ 215.441098][ T5874] usb 7-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 215.479633][ T5874] usb 7-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 215.492384][T10485] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.500482][ T5874] usb 7-1: config 220 has no interface number 2 [ 215.530567][ T5874] usb 7-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 215.534905][T10485] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.572228][ T5874] usb 7-1: config 220 interface 0 has no altsetting 0 [ 215.602421][ T5874] usb 7-1: config 220 interface 76 has no altsetting 0 [ 215.602647][T10485] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.609301][ T5874] usb 7-1: config 220 interface 1 has no altsetting 0 [ 215.622499][ T5874] usb 7-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 215.661131][ T5874] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 215.669335][T10485] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.693011][ T30] audit: type=1400 audit(1751069999.828:4483): avc: denied { audit_read } for pid=10765 comm="syz.0.1435" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 215.694500][ T5874] usb 7-1: Product: syz [ 215.727491][T10485] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.752892][T10485] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.774120][ T5874] usb 7-1: Manufacturer: syz [ 215.779462][ T5874] usb 7-1: SerialNumber: syz [ 215.858894][T10464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.880796][T10772] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1437'. [ 216.042202][ T6628] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.050062][ T6628] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.104493][ T5874] usb 7-1: Found UVC 7.01 device syz (8086:0b07) [ 216.141478][ T5874] usb 7-1: No valid video chain found. [ 216.147067][ T5874] usb 7-1: selecting invalid altsetting 0 [ 216.182998][ T714] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.209413][ T714] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.210629][ T5874] usb 7-1: selecting invalid altsetting 0 [ 216.244245][ T30] audit: type=1400 audit(1751070000.388:4484): avc: denied { bind } for pid=10782 comm="syz.0.1439" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 216.252846][ T5874] usbtest 7-1:220.1: probe with driver usbtest failed with error -22 [ 216.341394][ T5874] usb 7-1: USB disconnect, device number 18 [ 216.660412][T10464] veth0_vlan: entered promiscuous mode [ 216.719126][T10464] veth1_vlan: entered promiscuous mode [ 216.812023][T10464] veth0_macvtap: entered promiscuous mode [ 216.823975][T10464] veth1_macvtap: entered promiscuous mode [ 216.844418][T10464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.857299][T10464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.877679][T10464] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.887688][T10464] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.907790][T10464] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.923341][T10464] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.951172][ T5874] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 217.074879][ T6628] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.123885][ T5874] usb 1-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 217.138183][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.156412][ T5874] usb 1-1: config 0 descriptor?? [ 217.178301][ T5874] cp210x 1-1:0.0: cp210x converter detected [ 217.203106][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.219535][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.282661][ T6631] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.290525][ T6631] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.338710][ T6628] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.600348][T10806] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 217.619552][T10806] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 217.650324][ T5874] cp210x 1-1:0.0: failed to get vendor val 0x0010 size 3: -32 [ 217.662926][ T6628] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.695617][ T5874] usb 1-1: cp210x converter now attached to ttyUSB0 [ 217.750878][T10830] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 217.766694][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 217.774914][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 217.791667][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 217.800783][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 217.802579][ T6628] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.820160][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 217.828609][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 217.912272][ T5874] usb 1-1: USB disconnect, device number 29 [ 217.936240][ T5874] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 217.953576][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 217.953785][ T5874] cp210x 1-1:0.0: device disconnected [ 217.991721][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 218.019418][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 218.061559][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0263, bcdDevice= 0.00 [ 218.070653][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.107398][ T9] usb 4-1: config 0 descriptor?? [ 218.219643][ T6628] bridge_slave_1: left allmulticast mode [ 218.228132][ T6628] bridge_slave_1: left promiscuous mode [ 218.258100][ T6628] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.273983][ T6628] bridge_slave_0: left allmulticast mode [ 218.279757][ T6628] bridge_slave_0: left promiscuous mode [ 218.288116][ T6628] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.555997][ T9] apple 0003:05AC:0263.0018: global environment stack underflow [ 218.570017][ T9] apple 0003:05AC:0263.0018: item 0 4 1 11 parsing failed [ 218.581223][ T9] apple 0003:05AC:0263.0018: parse failed [ 218.587106][ T9] apple 0003:05AC:0263.0018: probe with driver apple failed with error -22 [ 218.809039][ T5939] usb 4-1: USB disconnect, device number 23 [ 218.834084][ T6628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.869518][ T6628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.892790][ T6628] bond0 (unregistering): Released all slaves [ 219.061448][ T24] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 219.212881][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 219.232994][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 219.245975][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 219.245980][ T24] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 219.246003][ T24] usb 1-1: config 0 has no interface number 0 [ 219.272002][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 219.279154][ T24] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 219.293304][T10831] chnl_net:caif_netlink_parms(): no params data found [ 219.300314][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 219.309128][ T24] usb 1-1: config 0 interface 113 has no altsetting 0 [ 219.319625][ T24] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 219.366150][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.381540][ T24] usb 1-1: Product: syz [ 219.387579][ T24] usb 1-1: Manufacturer: syz [ 219.393212][ T24] usb 1-1: SerialNumber: syz [ 219.400568][ T24] usb 1-1: config 0 descriptor?? [ 219.411400][ C1] usb 1-1: NFC: Urb failure (status -71) [ 219.609724][ C1] usb 1-1: NFC: Urb failure (status -71) [ 219.618837][ T24] usb 1-1: NFC: Unable to get FW version [ 219.636416][ T24] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -71 [ 219.665305][ T24] usb 1-1: USB disconnect, device number 30 [ 219.769735][ T6628] hsr_slave_0: left promiscuous mode [ 219.810611][ T6628] hsr_slave_1: left promiscuous mode [ 219.821476][ T6628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.833749][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.848845][ T6628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.862190][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.881310][ T5817] Bluetooth: hci2: command tx timeout [ 219.897180][ T6628] veth1_macvtap: left promiscuous mode [ 219.902973][ T6628] veth0_macvtap: left promiscuous mode [ 219.908568][ T6628] veth1_vlan: left promiscuous mode [ 219.914022][ T6628] veth0_vlan: left promiscuous mode [ 219.940903][T10880] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1460'. [ 220.006432][ T5817] Bluetooth: hci3: Unable to find connection for big 0x00 [ 220.787453][ T6628] team0 (unregistering): Port device team_slave_1 removed [ 220.828923][ T6628] team0 (unregistering): Port device team_slave_0 removed [ 221.350549][T10912] netlink: 160 bytes leftover after parsing attributes in process `syz.6.1469'. [ 221.411491][ T5817] Bluetooth: hci4: command tx timeout [ 221.536250][T10831] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.546243][T10831] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.554182][T10831] bridge_slave_0: entered allmulticast mode [ 221.565860][T10831] bridge_slave_0: entered promiscuous mode [ 221.580712][T10831] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.592072][T10831] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.600511][T10831] bridge_slave_1: entered allmulticast mode [ 221.611515][T10831] bridge_slave_1: entered promiscuous mode [ 221.613344][ T5874] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 221.628526][T10917] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 221.700877][T10917] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 221.772680][T10831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.805917][ T5874] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 221.832548][ T5874] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 221.845051][ T5874] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 221.858039][ T5874] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 221.860200][T10831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.868472][ T5874] usb 7-1: SerialNumber: syz [ 221.968267][ T5817] Bluetooth: hci2: command tx timeout [ 222.004015][T10831] team0: Port device team_slave_0 added [ 222.011282][T10862] chnl_net:caif_netlink_parms(): no params data found [ 222.041590][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 222.052421][T10831] team0: Port device team_slave_1 added [ 222.095499][ T5874] usb 7-1: 0:2 : does not exist [ 222.114903][ T5874] usb 7-1: 5:0: failed to get current value for ch 1 (-22) [ 222.139322][T10831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.148063][T10831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.178675][T10831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.202525][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 222.206632][ T5874] usb 7-1: 5:0: failed to get current value for ch 15 (-22) [ 222.212694][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 222.251252][ T9] usb 4-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 222.260091][ T5874] usb 7-1: USB disconnect, device number 19 [ 222.269475][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 222.306564][ T5810] udevd[5810]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 222.333385][ T9] usb 4-1: config 0 descriptor?? [ 222.358669][ T9] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input37 [ 222.415186][ T6628] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.450430][T10831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.462512][T10831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.488984][ T2147] usb 1-1: new full-speed USB device number 31 using dummy_hcd [ 222.490760][T10831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.569038][ T6628] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.627144][ T5169] bcm5974 4-1:0.0: could not read from device [ 222.641874][ T9] bcm5974 4-1:0.0: could not read from device [ 222.653700][ T5169] bcm5974 4-1:0.0: could not read from device [ 222.673008][ T9] input: failed to attach handler mousedev to device input37, error: -5 [ 222.673050][ T2147] usb 1-1: config 0 has an invalid interface number: 133 but max is 0 [ 222.694805][ T9] usb 4-1: USB disconnect, device number 24 [ 222.698769][ T5169] bcm5974 4-1:0.0: could not read from device [ 222.718417][ T5169] bcm5974 4-1:0.0: could not read from device [ 222.730626][ T2147] usb 1-1: config 0 has no interface number 0 [ 222.751813][ T6628] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.781396][ T2147] usb 1-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 222.807549][ T2147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.816290][ T2147] usb 1-1: Product: syz [ 222.818412][T10862] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.820450][ T2147] usb 1-1: Manufacturer: syz [ 222.833835][ T2147] usb 1-1: SerialNumber: syz [ 222.842874][T10862] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.844211][ T2147] usb 1-1: config 0 descriptor?? [ 222.873260][T10862] bridge_slave_0: entered allmulticast mode [ 222.889201][T10862] bridge_slave_0: entered promiscuous mode [ 222.906313][T10831] hsr_slave_0: entered promiscuous mode [ 222.917214][T10831] hsr_slave_1: entered promiscuous mode [ 222.932338][ T6628] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.950440][T10862] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.958273][T10862] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.966309][T10862] bridge_slave_1: entered allmulticast mode [ 222.983471][T10862] bridge_slave_1: entered promiscuous mode [ 223.054430][T10862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.085608][ T2147] keyspan 1-1:0.133: Keyspan 1 port adapter converter detected [ 223.098427][ T2147] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 81 [ 223.108501][ T2147] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 1 [ 223.117057][ T2147] keyspan 1-1:0.133: found no endpoint descriptor for endpoint 2 [ 223.135889][ T2147] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 223.173498][T10862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.347310][ C1] Unknown status report in ack skb [ 223.374230][T10862] team0: Port device team_slave_0 added [ 223.483219][ T5817] Bluetooth: hci4: command tx timeout [ 223.493016][T10862] team0: Port device team_slave_1 added [ 223.657144][ T5936] usb 1-1: USB disconnect, device number 31 [ 223.677371][ T5936] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 223.696827][ T5936] keyspan 1-1:0.133: device disconnected [ 223.814999][T10862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 223.823205][T10862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 223.887363][T10862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 223.947359][ T6628] bridge_slave_1: left allmulticast mode [ 223.963251][ T6628] bridge_slave_1: left promiscuous mode [ 223.979909][ T6628] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.995341][ T6628] bridge_slave_0: left allmulticast mode [ 224.005355][ T6628] bridge_slave_0: left promiscuous mode [ 224.011189][ T6628] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.041390][ T5817] Bluetooth: hci2: command tx timeout [ 224.468177][ T6628] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.484620][ T6628] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.495179][ T6628] bond0 (unregistering): Released all slaves [ 224.517276][T10862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.533256][T10862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.579780][T10862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.714834][T11001] SELinux: failed to load policy [ 224.837195][T10862] hsr_slave_0: entered promiscuous mode [ 224.853915][T10862] hsr_slave_1: entered promiscuous mode [ 224.872035][T10862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.889424][T10862] Cannot create hsr debugfs directory [ 225.488813][ T2147] kernel write not supported for file /cpuinfo (pid: 2147 comm: kworker/1:2) [ 225.508278][ T6628] hsr_slave_0: left promiscuous mode [ 225.533084][ T6628] hsr_slave_1: left promiscuous mode [ 225.549282][ T6628] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 225.561165][ T5817] Bluetooth: hci4: command tx timeout [ 225.580515][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 225.605019][ T6628] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 225.634222][ T6628] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 225.680640][ T6628] veth1_macvtap: left promiscuous mode [ 225.706658][ T6628] veth0_macvtap: left promiscuous mode [ 225.722182][ T6628] veth1_vlan: left promiscuous mode [ 225.733769][ T6628] veth0_vlan: left promiscuous mode [ 226.122823][ T5817] Bluetooth: hci2: command tx timeout [ 226.604563][ T5817] Bluetooth: hci3: command 0x0406 tx timeout [ 226.722406][ T30] audit: type=1400 audit(1751070010.858:4485): avc: denied { view } for pid=11049 comm="syz.0.1503" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 226.899794][ T6628] team0 (unregistering): Port device team_slave_1 removed [ 226.975387][ T30] audit: type=1326 audit(1751070011.098:4486): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242fd8e929 code=0x7ffc0000 [ 226.998870][ C0] vkms_vblank_simulate: vblank timer overrun [ 227.057476][ T6628] team0 (unregistering): Port device team_slave_0 removed [ 227.064785][ T30] audit: type=1326 audit(1751070011.098:4487): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242fd8e929 code=0x7ffc0000 [ 227.121192][ T30] audit: type=1326 audit(1751070011.108:4488): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=248 compat=0 ip=0x7f242fd8e929 code=0x7ffc0000 [ 227.198661][ T30] audit: type=1326 audit(1751070011.108:4489): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242fd8e929 code=0x7ffc0000 [ 227.233739][ T30] audit: type=1326 audit(1751070011.108:4490): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11054 comm="syz.0.1505" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f242fd8e929 code=0x7ffc0000 [ 227.259663][ T30] audit: type=1400 audit(1751070011.178:4491): avc: denied { watch } for pid=11057 comm="syz.6.1506" path="/proc/581" dev="proc" ino=37451 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 227.282194][ T2147] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 227.444612][ T2147] usb 1-1: Using ep0 maxpacket: 8 [ 227.453005][ T2147] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 13 [ 227.464176][ T2147] usb 1-1: New USB device found, idVendor=046d, idProduct=08ae, bcdDevice=11.58 [ 227.473769][ T2147] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 227.493112][ T2147] usb 1-1: Product: syz [ 227.509620][ T2147] usb 1-1: Manufacturer: syz [ 227.518713][ T2147] usb 1-1: SerialNumber: syz [ 227.533904][ T2147] usb 1-1: config 0 descriptor?? [ 227.550788][ T2147] gspca_main: gspca_zc3xx-2.14.0 probing 046d:08ae [ 227.641184][ T5813] Bluetooth: hci4: command tx timeout [ 228.524861][T10831] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 228.571525][ T2147] gspca_zc3xx: reg_w_i err -71 [ 228.574040][T10831] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 228.648590][T10831] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 228.696291][T10831] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 228.828186][T11114] Invalid ELF header len 8 [ 228.832813][ T30] audit: type=1400 audit(1751070012.968:4492): avc: denied { module_load } for pid=11113 comm="syz.6.1522" path="/264/bus" dev="tmpfs" ino=1414 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 228.902666][T10831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 228.967853][T10831] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.008233][T11118] netem: incorrect ge model size [ 229.025384][T11118] netem: change failed [ 229.034572][ T6628] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.041767][ T6628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.070287][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.077523][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.172233][ T2147] gspca_zc3xx: Unknown sensor - set to TAS5130C [ 229.178601][ T2147] gspca_zc3xx 1-1:0.0: probe with driver gspca_zc3xx failed with error -71 [ 229.187688][T10862] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 229.207959][T10862] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 229.219219][ T2147] usb 1-1: USB disconnect, device number 32 [ 229.246753][T10862] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 229.255318][T11120] SELinux: failed to load policy [ 229.279628][T10862] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 229.617401][T10862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.684468][T10862] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.726032][ T714] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.733224][ T714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.784538][ T714] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.791734][ T714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.944001][T10831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.097926][T10831] veth0_vlan: entered promiscuous mode [ 230.137109][T10831] veth1_vlan: entered promiscuous mode [ 230.218834][T10831] veth0_macvtap: entered promiscuous mode [ 230.238527][ T30] audit: type=1400 audit(1751070014.378:4493): avc: denied { listen } for pid=11156 comm="syz.0.1531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 230.249833][T10831] veth1_macvtap: entered promiscuous mode [ 230.317316][T10831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.334967][T10862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.364419][T10831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.396964][T10831] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.404154][T11166] overlayfs: NFS export requires "redirect_dir=nofollow" on non-upper mount, falling back to nfs_export=off. [ 230.417398][T11166] overlayfs: missing 'lowerdir' [ 230.420455][T10831] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.477972][T10831] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.486970][T10831] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.557719][ T30] audit: type=1400 audit(1751070014.678:4494): avc: denied { mounton } for pid=11172 comm="syz.6.1535" path="/269/file0" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 230.677093][T11177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1537'. [ 230.751575][ T714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.759432][ T714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.888754][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.939971][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.204507][T10862] veth0_vlan: entered promiscuous mode [ 231.304789][T11206] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 231.373390][T10862] veth1_vlan: entered promiscuous mode [ 231.468362][T10862] veth0_macvtap: entered promiscuous mode [ 231.508232][T10862] veth1_macvtap: entered promiscuous mode [ 231.567382][T10862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.605877][T10862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.638022][T10862] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.675360][T10862] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.686501][T10862] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.695495][T10862] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.848977][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.033489][ T1160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.081042][ T1160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.107509][ T1160] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.120470][ T1160] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.309153][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.532671][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.627424][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.976460][ T36] bridge_slave_1: left allmulticast mode [ 232.984487][ T36] bridge_slave_1: left promiscuous mode [ 232.990291][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.016111][ T36] bridge_slave_0: left allmulticast mode [ 233.031124][ T36] bridge_slave_0: left promiscuous mode [ 233.036917][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.274954][ T5815] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 233.286987][ T5815] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 233.297302][ T5815] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 233.306401][ T5815] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 233.321994][ T5815] Bluetooth: hci0: command 0x0405 tx timeout [ 233.325283][ T5825] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 233.328028][ T5813] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 233.532833][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.542913][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.580055][ T36] bond0 (unregistering): Released all slaves [ 233.607279][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 233.607294][ T30] audit: type=1326 audit(1751070017.748:4496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.3.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91eb18e929 code=0x7ffc0000 [ 233.678897][ T30] audit: type=1326 audit(1751070017.748:4497): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.3.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91eb18e929 code=0x7ffc0000 [ 233.728808][ T30] audit: type=1326 audit(1751070017.748:4498): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.3.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91eb18e929 code=0x7ffc0000 [ 233.923685][ T30] audit: type=1326 audit(1751070017.778:4499): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.3.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91eb18e929 code=0x7ffc0000 [ 233.953681][ T30] audit: type=1326 audit(1751070017.798:4500): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.3.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f91eb18e929 code=0x7ffc0000 [ 234.023637][ T30] audit: type=1326 audit(1751070017.798:4501): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.3.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91eb18e929 code=0x7ffc0000 [ 234.065480][ T30] audit: type=1326 audit(1751070017.798:4502): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.3.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91eb1858e7 code=0x7ffc0000 [ 234.101330][ T30] audit: type=1326 audit(1751070017.798:4503): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.3.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f91eb12ab19 code=0x7ffc0000 [ 234.138876][ T30] audit: type=1326 audit(1751070017.798:4504): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.3.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f91eb18e929 code=0x7ffc0000 [ 234.177537][ T30] audit: type=1326 audit(1751070017.798:4505): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11284 comm="syz.3.1556" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f91eb1858e7 code=0x7ffc0000 [ 234.363205][ T5817] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 234.379054][ T5817] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 234.390047][ T5817] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 234.401575][ T5815] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 234.409098][ T5815] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 234.674548][ T36] hsr_slave_0: left promiscuous mode [ 234.692905][ T36] hsr_slave_1: left promiscuous mode [ 234.701358][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 234.736721][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 234.766916][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.795123][ T5815] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 234.806557][ T5815] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 234.818760][ T5815] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 234.828906][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.838653][ T5815] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 234.855391][ T5815] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 234.885820][ T36] veth1_macvtap: left promiscuous mode [ 234.891603][ T36] veth0_macvtap: left promiscuous mode [ 234.897397][ T36] veth1_vlan: left promiscuous mode [ 234.904588][ T36] veth0_vlan: left promiscuous mode [ 235.401531][ T5813] Bluetooth: hci2: command tx timeout [ 235.431585][ T36] team0 (unregistering): Port device team_slave_1 removed [ 235.488892][ T36] team0 (unregistering): Port device team_slave_0 removed [ 235.939208][T11277] chnl_net:caif_netlink_parms(): no params data found [ 235.975461][T11319] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1565'. [ 236.090416][T11277] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.098159][T11277] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.105601][T11277] bridge_slave_0: entered allmulticast mode [ 236.113151][T11277] bridge_slave_0: entered promiscuous mode [ 236.131402][T11277] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.138719][T11277] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.146456][T11277] bridge_slave_1: entered allmulticast mode [ 236.156171][T11277] bridge_slave_1: entered promiscuous mode [ 236.238382][T11277] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.262621][T11277] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.322889][T11277] team0: Port device team_slave_0 added [ 236.340787][T11277] team0: Port device team_slave_1 added [ 236.348795][T11286] chnl_net:caif_netlink_parms(): no params data found [ 236.390158][T11277] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 236.397518][T11277] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.424754][T11277] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 236.451382][ T5815] Bluetooth: hci0: command tx timeout [ 236.464307][T11277] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 236.471514][T11277] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 236.498065][T11277] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 236.579589][ T714] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.637029][T11277] hsr_slave_0: entered promiscuous mode [ 236.646559][T11277] hsr_slave_1: entered promiscuous mode [ 236.655056][T11286] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.662976][T11286] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.670154][T11286] bridge_slave_0: entered allmulticast mode [ 236.677795][T11286] bridge_slave_0: entered promiscuous mode [ 236.709310][ T714] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.725263][T11298] chnl_net:caif_netlink_parms(): no params data found [ 236.735432][T11286] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.742962][T11286] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.750142][T11286] bridge_slave_1: entered allmulticast mode [ 236.757756][T11286] bridge_slave_1: entered promiscuous mode [ 236.815602][ T714] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.847001][T11286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.881012][ T714] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.897054][T11286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.921242][ T5815] Bluetooth: hci4: command tx timeout [ 236.950022][T11286] team0: Port device team_slave_0 added [ 237.014662][T11286] team0: Port device team_slave_1 added [ 237.025433][T11298] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.038861][T11298] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.046362][T11298] bridge_slave_0: entered allmulticast mode [ 237.055442][T11298] bridge_slave_0: entered promiscuous mode [ 237.100674][T11298] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.108853][T11298] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.116469][T11298] bridge_slave_1: entered allmulticast mode [ 237.124567][T11298] bridge_slave_1: entered promiscuous mode [ 237.193324][T11298] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 237.241745][T11286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.255132][T11286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.291151][T11286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.306886][T11286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.314577][T11286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.345530][T11286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.359245][T11298] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.369438][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 237.474769][T11298] team0: Port device team_slave_0 added [ 237.481357][ T5815] Bluetooth: hci2: command tx timeout [ 237.503689][T11286] hsr_slave_0: entered promiscuous mode [ 237.509875][T11286] hsr_slave_1: entered promiscuous mode [ 237.516999][T11286] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.524731][T11286] Cannot create hsr debugfs directory [ 237.532244][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 237.536862][T11298] team0: Port device team_slave_1 added [ 237.543337][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.559582][ T10] usb 7-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 237.568782][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.591892][ T10] usb 7-1: config 0 descriptor?? [ 237.613265][T11298] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.620262][T11298] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.647148][T11298] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.686428][ T714] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.707977][T11298] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.711317][ T5936] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 237.715285][T11298] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.749190][T11298] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 237.806014][T11341] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 237.826674][ T714] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.839935][T11341] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 237.875490][T11298] hsr_slave_0: entered promiscuous mode [ 237.887026][ T5936] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 237.887548][T11298] hsr_slave_1: entered promiscuous mode [ 237.897117][ T5936] usb 4-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 237.897143][ T5936] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 237.923206][T11298] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 237.923513][ T5936] usb 4-1: config 0 descriptor?? [ 237.930771][T11298] Cannot create hsr debugfs directory [ 238.010917][ T714] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.056504][ T10] cm6533_jd 0003:0D8C:0022.0019: unknown main item tag 0x0 [ 238.066893][ T10] cm6533_jd 0003:0D8C:0022.0019: unknown main item tag 0x0 [ 238.076807][ T10] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/0003:0D8C:0022.0019/input/input38 [ 238.094876][ T10] cm6533_jd 0003:0D8C:0022.0019: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.6-1/input0 [ 238.102991][T11277] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 238.135143][ T714] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 238.164522][T11277] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 238.193526][T11277] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 238.208005][T11277] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 238.262982][ T5874] usb 7-1: USB disconnect, device number 21 [ 238.359288][ T714] bridge_slave_1: left allmulticast mode [ 238.366031][ T714] bridge_slave_1: left promiscuous mode [ 238.373378][ T714] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.383089][ T714] bridge_slave_0: left allmulticast mode [ 238.388855][ T714] bridge_slave_0: left promiscuous mode [ 238.394750][ T714] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.399293][ T5936] nintendo 0003:057E:200E.001A: ignoring exceeding usage max [ 238.410934][ T5936] nintendo 0003:057E:200E.001A: unbalanced collection at end of report description [ 238.425033][ T5936] nintendo 0003:057E:200E.001A: HID parse failed [ 238.434303][ T5936] nintendo 0003:057E:200E.001A: probe - fail = -22 [ 238.447545][ T5936] nintendo 0003:057E:200E.001A: probe with driver nintendo failed with error -22 [ 238.527840][ T5815] Bluetooth: hci0: command tx timeout [ 238.615347][ T5944] usb 4-1: USB disconnect, device number 25 [ 238.735908][ T714] bond0 (unregistering): Released all slaves [ 238.844436][ T714] bond1 (unregistering): Released all slaves [ 239.001213][ T5815] Bluetooth: hci4: command 0x041b tx timeout [ 239.107511][ T714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 239.117747][ T714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.136067][ T714] bond0 (unregistering): Released all slaves [ 239.162186][ T24] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 239.226725][T11277] 8021q: adding VLAN 0 to HW filter on device bond0 [ 239.262940][T11277] 8021q: adding VLAN 0 to HW filter on device team0 [ 239.282424][ T6630] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.289570][ T6630] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.293519][T11368] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 239.309871][T11368] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 239.320849][ T24] usb 7-1: config 0 has an invalid interface number: 7 but max is 0 [ 239.338014][ T24] usb 7-1: config 0 has no interface number 0 [ 239.360410][ T24] usb 7-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 239.369890][ T24] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.410497][ T6630] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.410631][ T24] usb 7-1: config 0 descriptor?? [ 239.417691][ T6630] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.440687][ T24] cp210x 7-1:0.7: cp210x converter detected [ 239.564495][ T5815] Bluetooth: hci2: command tx timeout [ 239.738006][T11277] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.776592][T11277] veth0_vlan: entered promiscuous mode [ 239.790741][T11277] veth1_vlan: entered promiscuous mode [ 239.806837][ T714] hsr_slave_0: left promiscuous mode [ 239.817509][ T714] hsr_slave_1: left promiscuous mode [ 239.826361][ T714] hsr_slave_0: left promiscuous mode [ 239.835021][ T714] hsr_slave_1: left promiscuous mode [ 239.840911][ T714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.848469][ T714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.856746][ T24] cp210x 7-1:0.7: failed to get vendor val 0x000e size 3: -32 [ 239.864840][ T714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.872351][ T714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.900195][ T714] veth1_macvtap: left promiscuous mode [ 239.905857][ T714] veth0_macvtap: left promiscuous mode [ 239.911926][ T714] veth1_vlan: left promiscuous mode [ 239.917211][ T714] veth0_vlan: left promiscuous mode [ 239.923639][ T714] veth1_macvtap: left promiscuous mode [ 239.929125][ T714] veth0_macvtap: left promiscuous mode [ 239.935352][ T714] veth1_vlan: left promiscuous mode [ 239.940609][ T714] veth0_vlan: left promiscuous mode [ 240.088154][ T24] cp210x 7-1:0.7: GPIO initialisation failed: -19 [ 240.110019][ T24] usb 7-1: cp210x converter now attached to ttyUSB0 [ 240.129203][T11379] Invalid ELF header magic: != ELF [ 240.316042][ T2147] usb 7-1: USB disconnect, device number 22 [ 240.325930][ T2147] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 240.341945][ T2147] cp210x 7-1:0.7: device disconnected [ 240.426747][ T30] kauditd_printk_skb: 181 callbacks suppressed [ 240.426762][ T30] audit: type=1400 audit(1751070024.568:4687): avc: denied { create } for pid=11384 comm="syz.3.1584" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 240.435270][T11385] syz.3.1584: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 240.481067][T11385] CPU: 1 UID: 0 PID: 11385 Comm: syz.3.1584 Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 240.481097][T11385] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 240.481108][T11385] Call Trace: [ 240.481114][T11385] [ 240.481122][T11385] dump_stack_lvl+0x16c/0x1f0 [ 240.481155][T11385] warn_alloc+0x248/0x3a0 [ 240.481181][T11385] ? __pfx_warn_alloc+0x10/0x10 [ 240.481200][T11385] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 240.481225][T11385] ? stack_depot_save_flags+0x3e0/0xa40 [ 240.481256][T11385] ? kasan_save_stack+0x42/0x60 [ 240.481279][T11385] ? kasan_save_stack+0x33/0x60 [ 240.481300][T11385] ? kasan_save_track+0x14/0x30 [ 240.481322][T11385] ? xskq_create+0x52/0x1d0 [ 240.481344][T11385] ? xsk_setsockopt+0x640/0x840 [ 240.481362][T11385] ? do_sock_setsockopt+0x224/0x470 [ 240.481381][T11385] ? xskq_create+0xfb/0x1d0 [ 240.481403][T11385] __vmalloc_node_range_noprof+0xff5/0x14b0 [ 240.481432][T11385] ? xskq_create+0xfb/0x1d0 [ 240.481461][T11385] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 240.481490][T11385] ? xskq_create+0xfb/0x1d0 [ 240.481512][T11385] vmalloc_user_noprof+0x9e/0xe0 [ 240.481531][T11385] ? xskq_create+0xfb/0x1d0 [ 240.481554][T11385] xskq_create+0xfb/0x1d0 [ 240.481580][T11385] xsk_setsockopt+0x640/0x840 [ 240.481603][T11385] ? __pfx_xsk_setsockopt+0x10/0x10 [ 240.481622][T11385] ? __lock_acquire+0x622/0x1c90 [ 240.481656][T11385] ? selinux_socket_setsockopt+0x6a/0x80 [ 240.481681][T11385] ? __pfx_xsk_setsockopt+0x10/0x10 [ 240.481703][T11385] do_sock_setsockopt+0x224/0x470 [ 240.481720][T11385] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 240.481753][T11385] __sys_setsockopt+0x1a0/0x230 [ 240.481789][T11385] __x64_sys_setsockopt+0xbd/0x160 [ 240.481812][T11385] ? do_syscall_64+0x91/0x4c0 [ 240.481838][T11385] ? lockdep_hardirqs_on+0x7c/0x110 [ 240.481863][T11385] do_syscall_64+0xcd/0x4c0 [ 240.481891][T11385] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.481910][T11385] RIP: 0033:0x7f91eb18e929 [ 240.481925][T11385] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 240.481942][T11385] RSP: 002b:00007f91ebf1f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 240.481960][T11385] RAX: ffffffffffffffda RBX: 00007f91eb3b5fa0 RCX: 00007f91eb18e929 [ 240.481972][T11385] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000006 [ 240.481982][T11385] RBP: 00007f91eb210b39 R08: 0000000000000004 R09: 0000000000000000 [ 240.481993][T11385] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 240.482004][T11385] R13: 0000000000000000 R14: 00007f91eb3b5fa0 R15: 00007ffd1db12178 [ 240.482029][T11385] [ 240.482035][T11385] Mem-Info: [ 240.611206][ T5815] Bluetooth: hci0: command tx timeout [ 240.615137][T11385] active_anon:21443 inactive_anon:0 isolated_anon:0 [ 240.615137][T11385] active_file:17935 inactive_file:40669 isolated_file:0 [ 240.615137][T11385] unevictable:768 dirty:363 writeback:0 [ 240.615137][T11385] slab_reclaimable:12156 slab_unreclaimable:99493 [ 240.615137][T11385] mapped:29247 shmem:17740 pagetables:894 [ 240.615137][T11385] sec_pagetables:0 bounce:0 [ 240.615137][T11385] kernel_misc_reclaimable:0 [ 240.615137][T11385] free:1277106 free_pcp:22933 free_cma:0 [ 240.804233][T11385] Node 0 active_anon:85772kB inactive_anon:0kB active_file:71740kB inactive_file:162476kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:116988kB dirty:1448kB writeback:0kB shmem:69424kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11824kB pagetables:3464kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 240.847701][T11385] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:112kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 240.879695][T11385] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.931224][T11385] lowmem_reserve[]: 0 2481 2482 2482 2482 [ 240.951631][T11385] Node 0 DMA32 free:1193092kB boost:0kB min:34076kB low:42592kB high:51108kB reserved_highatomic:0KB free_highatomic:0KB active_anon:85636kB inactive_anon:0kB active_file:71740kB inactive_file:161144kB unevictable:1536kB writepending:1444kB present:3129332kB managed:2540576kB mlocked:0kB bounce:0kB free_pcp:67920kB local_pcp:43916kB free_cma:0kB [ 240.992893][T11387] input: syz1 as /devices/virtual/input/input39 [ 241.012880][T11385] lowmem_reserve[]: 0 0 1 1 1 [ 241.017669][T11385] Node 0 Normal free:0kB boost:0kB min:16kB low:20kB high:24kB reserved_highatomic:0KB free_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:1332kB unevictable:0kB writepending:4kB present:1048580kB managed:1388kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:12kB free_cma:0kB [ 241.061886][T11385] lowmem_reserve[]: 0 0 0 0 0 [ 241.066675][T11385] Node 1 Normal free:3900120kB boost:0kB min:55804kB low:69752kB high:83700kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:23296kB local_pcp:9824kB free_cma:0kB [ 241.097879][ T5815] Bluetooth: hci4: command 0x041b tx timeout [ 241.127327][T11385] lowmem_reserve[]: 0 0 0 0 0 [ 241.132292][T11385] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 241.146080][T11385] Node 0 DMA32: 725*4kB (UME) 379*8kB (UM) 116*16kB (UME) 141*32kB (UME) 92*64kB (UM) 81*128kB (UME) 65*256kB (UME) 42*512kB (UME) 18*1024kB (UM) 5*2048kB (UME) 268*4096kB (UM) = 1193100kB [ 241.165087][T11385] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 241.176917][T11385] Node 1 Normal: 176*4kB (U) 41*8kB (UME) 47*16kB (UME) 87*32kB (UME) 24*64kB (UME) 6*128kB (UME) 6*256kB (UME) 5*512kB (UM) 2*1024kB (ME) 2*2048kB (UE) 948*4096kB (M) = 3900120kB [ 241.218419][T11385] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.232014][T11385] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 241.299592][T11385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 241.317694][T11385] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 241.322806][T11393] netlink: 'syz.6.1588': attribute type 1 has an invalid length. [ 241.327104][T11385] 76341 total pagecache pages [ 241.339572][T11385] 0 pages in swap cache [ 241.343917][T11385] Free swap = 124996kB [ 241.348089][T11385] Total swap = 124996kB [ 241.352437][T11385] 2097051 pages RAM [ 241.356083][T11393] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1588'. [ 241.359545][T11385] 0 pages HighMem/MovableOnly [ 241.370264][T11385] 429929 pages reserved [ 241.378452][T11385] 0 pages cma reserved [ 241.642627][ T5815] Bluetooth: hci2: command tx timeout [ 242.284519][ T714] team0 (unregistering): Port device team_slave_1 removed [ 242.322847][ T24] hid-generic 0000:0000:0000.001B: unknown main item tag 0x0 [ 242.348276][ T24] hid-generic 0000:0000:0000.001B: hidraw0: HID v0.00 Device [syz1] on syz0 [ 242.420482][ T714] team0 (unregistering): Port device team_slave_0 removed [ 242.682013][ T5815] Bluetooth: hci0: command tx timeout [ 242.989571][ T5874] infiniband syz1: ib_query_port failed (-19) [ 243.099385][T11277] veth0_macvtap: entered promiscuous mode [ 243.140035][T11277] veth1_macvtap: entered promiscuous mode [ 243.167266][ T5815] Bluetooth: hci4: command 0x041b tx timeout [ 243.242699][T11277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.372849][T11298] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 243.385452][T11277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.396590][T11277] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.407004][T11277] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.416746][T11277] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.425487][T11277] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.440765][T11298] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 243.458109][T11298] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 243.502318][T11298] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 243.676528][T11286] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 243.690004][ T6631] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.702586][T11286] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 243.718698][ T6631] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.735547][T11286] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 243.767712][T11286] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 243.821819][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.829713][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.916769][T11298] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.953328][T11298] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.024718][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.031898][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.081902][ T714] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.089146][ T714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.141455][T11468] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1615'. [ 244.148933][T11286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 244.311660][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.345076][T11286] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.379211][ T6631] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.386421][ T6631] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.418296][ T6631] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.425480][ T6631] bridge0: port 2(bridge_slave_1) entered forwarding state [ 244.567528][T11298] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.611349][T11298] veth0_vlan: entered promiscuous mode [ 244.628850][T11298] veth1_vlan: entered promiscuous mode [ 244.656602][T11286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.679324][T11298] veth0_macvtap: entered promiscuous mode [ 244.689265][T11298] veth1_macvtap: entered promiscuous mode [ 244.708479][T11298] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.727944][T11298] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 244.740871][T11298] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.749859][T11298] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.759029][T11298] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.768741][T11298] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 244.861825][ T6638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.869685][ T6638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.908756][ T6638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.917551][ T6638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.939869][T11286] veth0_vlan: entered promiscuous mode [ 244.963866][T11286] veth1_vlan: entered promiscuous mode [ 245.139015][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.191963][T11286] veth0_macvtap: entered promiscuous mode [ 245.316004][T11286] veth1_macvtap: entered promiscuous mode [ 245.379107][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.399559][ T5813] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 245.416066][ T5813] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 245.425723][ T5813] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 245.433893][ T5813] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 245.439590][T11286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.454988][ T5813] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 245.517443][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.543015][T11286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.557923][T11286] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.568057][T11286] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.578564][T11286] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.587715][T11286] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.739788][ T714] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.764860][ T714] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.833484][ T36] bridge_slave_1: left allmulticast mode [ 245.839195][ T36] bridge_slave_1: left promiscuous mode [ 245.845040][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.858690][ T36] bridge_slave_0: left allmulticast mode [ 245.866675][ T36] bridge_slave_0: left promiscuous mode [ 245.874583][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.015901][ T5939] psmouse serio3: Failed to reset mouse on : -5 [ 246.236157][ T5813] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 246.248042][ T5813] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 246.261703][ T5813] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 246.285282][ T5813] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 246.300077][ T5813] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 246.342447][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 246.352628][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 246.363774][ T36] bond0 (unregistering): Released all slaves [ 246.381691][ T6630] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.399742][ T6630] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.539073][T11489] chnl_net:caif_netlink_parms(): no params data found [ 246.730096][T11514] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 246.755789][T11489] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.763938][T11489] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.771761][T11489] bridge_slave_0: entered allmulticast mode [ 246.779188][T11489] bridge_slave_0: entered promiscuous mode [ 246.805235][T11489] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.814527][T11489] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.821817][T11489] bridge_slave_1: entered allmulticast mode [ 246.831906][T11489] bridge_slave_1: entered promiscuous mode [ 246.878965][ T36] hsr_slave_0: left promiscuous mode [ 246.891731][ T36] hsr_slave_1: left promiscuous mode [ 246.898263][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.919705][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.940126][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.949382][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.972069][ T36] veth1_macvtap: left promiscuous mode [ 246.977602][ T36] veth0_macvtap: left promiscuous mode [ 246.983563][ T36] veth1_vlan: left promiscuous mode [ 246.988807][ T36] veth0_vlan: left promiscuous mode [ 247.302289][ T36] team0 (unregistering): Port device team_slave_1 removed [ 247.339574][ T36] team0 (unregistering): Port device team_slave_0 removed [ 247.561682][ T5815] Bluetooth: hci2: command tx timeout [ 247.700636][T11489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.742257][T11489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.930309][T11489] team0: Port device team_slave_0 added [ 247.976558][ T5813] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 247.977925][T11489] team0: Port device team_slave_1 added [ 247.985744][ T5813] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 248.004817][ T5813] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 248.025300][ T5813] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 248.034187][ T5813] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 248.097121][T11489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.105688][T11489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.135294][T11489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.150003][T11489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.157525][T11489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.183972][T11489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.227822][T11502] chnl_net:caif_netlink_parms(): no params data found [ 248.361743][ T5813] Bluetooth: hci4: command tx timeout [ 248.381878][T11489] hsr_slave_0: entered promiscuous mode [ 248.387930][T11489] hsr_slave_1: entered promiscuous mode [ 248.462434][ T36] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.504240][ T30] audit: type=1400 audit(1751070032.648:4688): avc: denied { setattr } for pid=11539 comm="syz.6.1632" name="/" dev="configfs" ino=1165 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 248.603185][T11502] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.610591][T11502] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.618302][T11502] bridge_slave_0: entered allmulticast mode [ 248.625761][T11502] bridge_slave_0: entered promiscuous mode [ 248.635586][T11502] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.642825][T11502] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.650614][T11502] bridge_slave_1: entered allmulticast mode [ 248.658062][T11502] bridge_slave_1: entered promiscuous mode [ 248.717240][T11502] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.756210][T11502] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.884707][T11502] team0: Port device team_slave_0 added [ 248.894337][T11502] team0: Port device team_slave_1 added [ 248.987934][T11502] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.995152][T11502] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.021046][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.029784][T11502] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 249.068757][ T36] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.099835][T11528] chnl_net:caif_netlink_parms(): no params data found [ 249.112742][T11555] @: renamed from vlan0 (while UP) [ 249.120123][T11502] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 249.128373][T11502] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.154282][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.164787][T11502] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.204719][ T36] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.282245][T11502] hsr_slave_0: entered promiscuous mode [ 249.288362][T11502] hsr_slave_1: entered promiscuous mode [ 249.298103][T11502] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 249.306127][T11502] Cannot create hsr debugfs directory [ 249.336508][ T36] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.449726][T11528] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.463697][T11528] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.472911][T11528] bridge_slave_0: entered allmulticast mode [ 249.480232][T11528] bridge_slave_0: entered promiscuous mode [ 249.509755][T11528] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.517619][T11528] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.528349][T11528] bridge_slave_1: entered allmulticast mode [ 249.535972][T11528] bridge_slave_1: entered promiscuous mode [ 249.615439][T11573] input: syz0 as /devices/virtual/input/input41 [ 249.632346][T11528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.641671][ T5813] Bluetooth: hci2: command tx timeout [ 249.677664][T11528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.775102][T11528] team0: Port device team_slave_0 added [ 249.787010][T11528] team0: Port device team_slave_1 added [ 249.831039][ T5939] misc userio: Buffer overflowed, userio client isn't keeping up [ 249.875485][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.909390][ T30] audit: type=1400 audit(1751070034.048:4689): avc: denied { read } for pid=11578 comm="syz.6.1647" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 249.938338][T11528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 249.945626][T11528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 249.971511][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.979297][T11528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.036923][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.049204][T11583] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1648'. [ 250.060051][T11528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.067393][T11528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.093261][ C0] vkms_vblank_simulate: vblank timer overrun [ 250.099975][T11528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.122602][ T5813] Bluetooth: hci0: command tx timeout [ 250.129217][ T43] usb 4-1: [UEAGLE-ATM] firmware is not available [ 250.139437][T11583] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.161515][T11583] bridge_slave_1 (unregistering): left allmulticast mode [ 250.168588][T11583] bridge_slave_1 (unregistering): left promiscuous mode [ 250.176050][T11583] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.214968][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.240577][T11489] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 250.252781][T11489] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 250.289992][T11489] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 250.305111][T11489] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 250.347486][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.367908][T11528] hsr_slave_0: entered promiscuous mode [ 250.374202][T11528] hsr_slave_1: entered promiscuous mode [ 250.380113][T11528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.388445][T11528] Cannot create hsr debugfs directory [ 250.442895][ T5813] Bluetooth: hci4: command tx timeout [ 250.615511][ T36] bridge_slave_1: left allmulticast mode [ 250.621650][ T36] bridge_slave_1: left promiscuous mode [ 250.629051][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.639887][ T36] bridge_slave_0: left allmulticast mode [ 250.652500][ T36] bridge_slave_0: left promiscuous mode [ 250.658456][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.676180][ T36] bridge_slave_1: left allmulticast mode [ 250.686088][ T36] bridge_slave_1: left promiscuous mode [ 250.692074][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.704111][ T36] bridge_slave_0: left allmulticast mode [ 250.709786][ T36] bridge_slave_0: left promiscuous mode [ 250.716474][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.902143][ T5939] input: PS/2 Generic Mouse as /devices/serio3/input/input40 [ 251.149945][ T5939] psmouse serio3: Failed to enable mouse on [ 251.227796][T11603] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1655'. [ 251.241162][ T5867] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 251.323883][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.337557][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.347153][ T36] bond0 (unregistering): Released all slaves [ 251.395384][ T5867] usb 7-1: Using ep0 maxpacket: 32 [ 251.418487][ T5867] usb 7-1: New USB device found, idVendor=174f, idProduct=6a31, bcdDevice=26.3f [ 251.434816][ T5867] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 251.443902][ T5867] usb 7-1: Product: syz [ 251.448081][ T5867] usb 7-1: Manufacturer: syz [ 251.461809][ T5867] usb 7-1: SerialNumber: syz [ 251.475934][ T5867] usb 7-1: config 0 descriptor?? [ 251.483969][ T5867] gspca_main: stk1135-2.14.0 probing 174f:6a31 [ 251.646090][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 251.656304][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 251.666077][ T36] bond0 (unregistering): Released all slaves [ 251.721356][ T5813] Bluetooth: hci2: command tx timeout [ 251.739422][T11489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 251.807956][T11489] 8021q: adding VLAN 0 to HW filter on device team0 [ 251.879719][ T714] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.886919][ T714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.900606][ T6638] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.907776][ T6638] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.010413][T11609] netlink: 'syz.3.1658': attribute type 4 has an invalid length. [ 252.065647][T11609] netlink: 'syz.3.1658': attribute type 4 has an invalid length. [ 252.202315][ T5813] Bluetooth: hci0: command tx timeout [ 252.278201][ T36] hsr_slave_0: left promiscuous mode [ 252.293928][ T36] hsr_slave_1: left promiscuous mode [ 252.299853][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.317133][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.325682][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.333706][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.344118][ T36] hsr_slave_0: left promiscuous mode [ 252.349964][ T36] hsr_slave_1: left promiscuous mode [ 252.360855][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.369951][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.377959][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.385458][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.417257][ T36] veth1_macvtap: left promiscuous mode [ 252.422952][ T36] veth0_macvtap: left promiscuous mode [ 252.428539][ T36] veth1_vlan: left promiscuous mode [ 252.434341][ T36] veth0_vlan: left promiscuous mode [ 252.440510][ T36] veth1_macvtap: left promiscuous mode [ 252.446999][ T36] veth0_macvtap: left promiscuous mode [ 252.454218][ T36] veth1_vlan: left promiscuous mode [ 252.459516][ T36] veth0_vlan: left promiscuous mode [ 252.521390][ T5813] Bluetooth: hci4: command tx timeout [ 252.728083][ T5867] gspca_stk1135: reg_w 0xd err -71 [ 252.734897][ T5867] gspca_stk1135: serial bus timeout: status=0x00 [ 252.741451][ T5867] gspca_stk1135: Sensor write failed [ 252.746804][ T5867] gspca_stk1135: serial bus timeout: status=0x00 [ 252.754359][ T5867] gspca_stk1135: Sensor write failed [ 252.759747][ T5867] gspca_stk1135: serial bus timeout: status=0x00 [ 252.767122][ T5867] gspca_stk1135: Sensor read failed [ 252.772776][ T5867] gspca_stk1135: serial bus timeout: status=0x00 [ 252.779244][ T5867] gspca_stk1135: Sensor read failed [ 252.784492][ T5867] gspca_stk1135: Detected sensor type unknown (0x0) [ 252.791241][ T5867] gspca_stk1135: serial bus timeout: status=0x00 [ 252.797586][ T5867] gspca_stk1135: Sensor read failed [ 252.803870][ T5867] gspca_stk1135: serial bus timeout: status=0x00 [ 252.810228][ T5867] gspca_stk1135: Sensor read failed [ 252.815656][ T5867] gspca_stk1135: serial bus timeout: status=0x00 [ 252.822114][ T5867] gspca_stk1135: Sensor write failed [ 252.827445][ T5867] gspca_stk1135: serial bus timeout: status=0x00 [ 252.833942][ T5867] gspca_stk1135: Sensor write failed [ 252.839294][ T5867] stk1135 7-1:0.0: probe with driver stk1135 failed with error -71 [ 252.851121][ T5867] usb 7-1: USB disconnect, device number 23 [ 252.999684][ T36] team0 (unregistering): Port device team_slave_1 removed [ 253.059835][ T36] team0 (unregistering): Port device team_slave_0 removed [ 253.331154][ T10] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 253.491323][ T10] usb 4-1: Using ep0 maxpacket: 32 [ 253.498842][ T10] usb 4-1: config 0 has an invalid interface number: 85 but max is 0 [ 253.507204][ T10] usb 4-1: config 0 has no interface number 0 [ 253.513772][ T10] usb 4-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 253.524911][ T10] usb 4-1: config 0 interface 85 has no altsetting 0 [ 253.537899][ T10] usb 4-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 253.548195][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 253.560650][ T10] usb 4-1: Product: syz [ 253.568761][ T10] usb 4-1: Manufacturer: syz [ 253.573675][ T10] usb 4-1: SerialNumber: syz [ 253.580602][ T10] usb 4-1: config 0 descriptor?? [ 253.783485][ T36] team0 (unregistering): Port device team_slave_1 removed [ 253.805857][ T5813] Bluetooth: hci2: command tx timeout [ 253.833099][ T36] team0 (unregistering): Port device team_slave_0 removed [ 254.060048][T11621] SELinux: failed to load policy [ 254.200026][ T10] appletouch 4-1:0.85: Geyser mode initialized. [ 254.217885][ T10] input: appletouch as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.85/input/input42 [ 254.240039][ C0] [ 254.242394][ C0] ======================================================== [ 254.249560][ C0] WARNING: possible irq lock inversion dependency detected [ 254.256745][ C0] 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 Not tainted [ 254.263829][ C0] -------------------------------------------------------- [ 254.271001][ C0] acpid/5169 just changed the state of lock: [ 254.276967][ C0] ffff888056314230 (&dev->event_lock#2){..-.}-{3:3}, at: input_event+0x70/0xb0 [ 254.281211][ T5813] Bluetooth: hci0: command tx timeout [ 254.285992][ C0] but this lock took another, SOFTIRQ-READ-unsafe lock in the past: [ 254.286006][ C0] (tasklist_lock){.+.+}-{3:3} [ 254.299340][ C0] [ 254.299340][ C0] [ 254.299340][ C0] and interrupts could create inverse lock ordering between them. [ 254.299340][ C0] [ 254.318384][ C0] [ 254.318384][ C0] other info that might help us debug this: [ 254.326426][ C0] Chain exists of: [ 254.326426][ C0] &dev->event_lock#2 --> &client->buffer_lock --> tasklist_lock [ 254.326426][ C0] [ 254.339974][ C0] Possible interrupt unsafe locking scenario: [ 254.339974][ C0] [ 254.348274][ C0] CPU0 CPU1 [ 254.353618][ C0] ---- ---- [ 254.358960][ C0] lock(tasklist_lock); [ 254.363189][ C0] local_irq_disable(); [ 254.369934][ C0] lock(&dev->event_lock#2); [ 254.377119][ C0] lock(&client->buffer_lock); [ 254.384473][ C0] [ 254.387904][ C0] lock(&dev->event_lock#2); [ 254.392742][ C0] [ 254.392742][ C0] *** DEADLOCK *** [ 254.392742][ C0] [ 254.400864][ C0] 1 lock held by acpid/5169: [ 254.405431][ C0] #0: ffffffff8e5cff38 (rcu_state.exp_mutex){+.+.}-{4:4}, at: exp_funnel_lock+0x284/0x3c0 [ 254.415433][ C0] [ 254.415433][ C0] the shortest dependencies between 2nd lock and 1st lock: [ 254.424786][ C0] -> (tasklist_lock){.+.+}-{3:3} { [ 254.430243][ C0] HARDIRQ-ON-R at: [ 254.434552][ C0] lock_acquire+0x179/0x350 [ 254.441394][ C0] _raw_read_lock+0x5f/0x70 [ 254.448230][ C0] __do_wait+0x105/0x890 [ 254.454808][ C0] do_wait+0x21e/0x5a0 [ 254.461208][ C0] kernel_wait+0x9f/0x160 [ 254.467873][ C0] call_usermodehelper_exec_work+0xf1/0x170 [ 254.476098][ C0] process_one_work+0x9cc/0x1b70 [ 254.483364][ C0] worker_thread+0x6c8/0xf10 [ 254.490282][ C0] kthread+0x3c2/0x780 [ 254.496677][ C0] ret_from_fork+0x5d4/0x6f0 [ 254.503601][ C0] ret_from_fork_asm+0x1a/0x30 [ 254.510693][ C0] SOFTIRQ-ON-R at: [ 254.515004][ C0] lock_acquire+0x179/0x350 [ 254.521841][ C0] _raw_read_lock+0x5f/0x70 [ 254.528674][ C0] __do_wait+0x105/0x890 [ 254.535250][ C0] do_wait+0x21e/0x5a0 [ 254.541650][ C0] kernel_wait+0x9f/0x160 [ 254.548374][ C0] call_usermodehelper_exec_work+0xf1/0x170 [ 254.556595][ C0] process_one_work+0x9cc/0x1b70 [ 254.563862][ C0] worker_thread+0x6c8/0xf10 [ 254.570777][ C0] kthread+0x3c2/0x780 [ 254.577173][ C0] ret_from_fork+0x5d4/0x6f0 [ 254.584099][ C0] ret_from_fork_asm+0x1a/0x30 [ 254.591190][ C0] INITIAL USE at: [ 254.595412][ C0] lock_acquire+0x179/0x350 [ 254.602162][ C0] _raw_write_lock_irq+0x36/0x50 [ 254.609345][ C0] copy_process+0x4caf/0x76a0 [ 254.616272][ C0] kernel_clone+0xfc/0x960 [ 254.622965][ C0] user_mode_thread+0xc7/0x110 [ 254.630011][ C0] rest_init+0x23/0x2b0 [ 254.636431][ C0] start_kernel+0x3ee/0x4d0 [ 254.643202][ C0] x86_64_start_reservations+0x18/0x30 [ 254.650936][ C0] x86_64_start_kernel+0x130/0x190 [ 254.658309][ C0] common_startup_64+0x13e/0x148 [ 254.665492][ C0] INITIAL READ USE at: [ 254.670152][ C0] lock_acquire+0x179/0x350 [ 254.677366][ C0] _raw_read_lock+0x5f/0x70 [ 254.684571][ C0] __do_wait+0x105/0x890 [ 254.691506][ C0] do_wait+0x21e/0x5a0 [ 254.698257][ C0] kernel_wait+0x9f/0x160 [ 254.705270][ C0] call_usermodehelper_exec_work+0xf1/0x170 [ 254.713840][ C0] process_one_work+0x9cc/0x1b70 [ 254.721452][ C0] worker_thread+0x6c8/0xf10 [ 254.728720][ C0] kthread+0x3c2/0x780 [ 254.735463][ C0] ret_from_fork+0x5d4/0x6f0 [ 254.742740][ C0] ret_from_fork_asm+0x1a/0x30 [ 254.750179][ C0] } [ 254.753006][ C0] ... key at: [] tasklist_lock+0x18/0x40 [ 254.761056][ C0] ... acquired at: [ 254.765183][ C0] _raw_read_lock+0x5f/0x70 [ 254.769846][ C0] send_sigurg+0xed/0xc80 [ 254.774331][ C0] sk_send_sigurg+0x76/0x360 [ 254.779081][ C0] unix_stream_sendmsg+0xeb3/0x11d0 [ 254.784441][ C0] ____sys_sendmsg+0xa98/0xc70 [ 254.789361][ C0] ___sys_sendmsg+0x134/0x1d0 [ 254.794203][ C0] __sys_sendmmsg+0x200/0x420 [ 254.799043][ C0] __x64_sys_sendmmsg+0x9c/0x100 [ 254.804143][ C0] do_syscall_64+0xcd/0x4c0 [ 254.808810][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.814857][ C0] [ 254.817163][ C0] -> (&f_owner->lock){....}-{3:3} { [ 254.822622][ C0] INITIAL USE at: [ 254.826758][ C0] lock_acquire+0x179/0x350 [ 254.833336][ C0] _raw_write_lock_irq+0x36/0x50 [ 254.840345][ C0] __f_setown+0x61/0x3c0 [ 254.846663][ C0] do_fcntl+0x1098/0x15a0 [ 254.853071][ C0] __x64_sys_fcntl+0x163/0x200 [ 254.859910][ C0] do_syscall_64+0xcd/0x4c0 [ 254.866505][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.874465][ C0] INITIAL READ USE at: [ 254.879034][ C0] lock_acquire+0x179/0x350 [ 254.886044][ C0] _raw_read_lock_irqsave+0x74/0x90 [ 254.893754][ C0] send_sigurg+0x5f/0xc80 [ 254.900581][ C0] sk_send_sigurg+0x76/0x360 [ 254.907675][ C0] unix_stream_sendmsg+0xeb3/0x11d0 [ 254.915378][ C0] ____sys_sendmsg+0xa98/0xc70 [ 254.922642][ C0] ___sys_sendmsg+0x134/0x1d0 [ 254.929837][ C0] __sys_sendmsg+0x16d/0x220 [ 254.936935][ C0] do_syscall_64+0xcd/0x4c0 [ 254.943949][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 254.952342][ C0] } [ 254.955084][ C0] ... key at: [] __key.1+0x0/0x40 [ 254.962442][ C0] ... acquired at: [ 254.966483][ C0] _raw_read_lock_irqsave+0x74/0x90 [ 254.971841][ C0] send_sigio+0x31/0x3e0 [ 254.976254][ C0] kill_fasync+0x214/0x510 [ 254.980825][ C0] lease_break_callback+0x23/0x30 [ 254.986014][ C0] __break_lease+0x674/0x1810 [ 254.990847][ C0] do_dentry_open+0x6e1/0x1c10 [ 254.995783][ C0] vfs_open+0x82/0x3f0 [ 255.000014][ C0] path_openat+0x1de4/0x2cb0 [ 255.004766][ C0] do_filp_open+0x20b/0x470 [ 255.009427][ C0] do_sys_openat2+0x11b/0x1d0 [ 255.014258][ C0] __x64_sys_open+0x153/0x1e0 [ 255.019088][ C0] do_syscall_64+0xcd/0x4c0 [ 255.023754][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.029803][ C0] [ 255.032120][ C0] -> (&new->fa_lock){....}-{3:3} { [ 255.037403][ C0] INITIAL USE at: [ 255.041451][ C0] lock_acquire+0x179/0x350 [ 255.047856][ C0] _raw_write_lock_irq+0x36/0x50 [ 255.054693][ C0] fasync_remove_entry+0xb2/0x1e0 [ 255.061609][ C0] fasync_helper+0xaf/0xd0 [ 255.067915][ C0] sock_fasync+0x92/0x140 [ 255.074140][ C0] __fput+0x96b/0xb70 [ 255.080011][ C0] task_work_run+0x150/0x240 [ 255.086500][ C0] get_signal+0x1d1/0x26d0 [ 255.092811][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 255.100253][ C0] exit_to_user_mode_loop+0x84/0x110 [ 255.107434][ C0] do_syscall_64+0x3f6/0x4c0 [ 255.113927][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.121712][ C0] INITIAL READ USE at: [ 255.126194][ C0] lock_acquire+0x179/0x350 [ 255.133043][ C0] _raw_read_lock_irqsave+0x74/0x90 [ 255.140574][ C0] kill_fasync+0x138/0x510 [ 255.147318][ C0] sock_wake_async+0x132/0x160 [ 255.154416][ C0] sock_def_write_space+0x369/0x4c0 [ 255.161957][ C0] sock_wfree+0x25e/0x880 [ 255.168619][ C0] skb_release_head_state+0xa6/0x290 [ 255.176241][ C0] kfree_skb_list_reason+0x292/0x4c0 [ 255.183860][ C0] skb_release_data+0x769/0x9c0 [ 255.191044][ C0] sk_skb_reason_drop+0x129/0x1a0 [ 255.198421][ C0] rfcomm_sock_sendmsg+0x415/0x4d0 [ 255.205867][ C0] sock_write_iter+0x4fc/0x5b0 [ 255.212958][ C0] do_iter_readv_writev+0x654/0x950 [ 255.220484][ C0] vfs_writev+0x35f/0xde0 [ 255.227141][ C0] do_writev+0x28c/0x340 [ 255.233712][ C0] do_syscall_64+0xcd/0x4c0 [ 255.240561][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.248782][ C0] } [ 255.251450][ C0] ... key at: [] __key.0+0x0/0x40 [ 255.258720][ C0] ... acquired at: [ 255.262675][ C0] _raw_read_lock_irqsave+0x74/0x90 [ 255.268053][ C0] kill_fasync+0x138/0x510 [ 255.272627][ C0] evdev_pass_values+0x619/0x9b0 [ 255.277728][ C0] evdev_events+0x1bb/0x390 [ 255.282399][ C0] input_pass_values+0x6c4/0x890 [ 255.287495][ C0] input_handle_event+0xf00/0x14d0 [ 255.292767][ C0] input_inject_event+0x1cd/0x390 [ 255.297953][ C0] evdev_write+0x457/0x750 [ 255.302533][ C0] vfs_write+0x2a0/0x1150 [ 255.307027][ C0] ksys_write+0x1f8/0x250 [ 255.311517][ C0] do_syscall_64+0xcd/0x4c0 [ 255.316184][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.322252][ C0] [ 255.324571][ C0] -> (&client->buffer_lock){....}-{3:3} { [ 255.330378][ C0] INITIAL USE at: [ 255.334339][ C0] lock_acquire+0x179/0x350 [ 255.340570][ C0] _raw_spin_lock+0x2e/0x40 [ 255.346798][ C0] evdev_pass_values+0x10e/0x9b0 [ 255.353459][ C0] evdev_events+0x1bb/0x390 [ 255.359686][ C0] input_pass_values+0x6c4/0x890 [ 255.366345][ C0] input_handle_event+0xf00/0x14d0 [ 255.373179][ C0] input_inject_event+0x1cd/0x390 [ 255.379930][ C0] evdev_write+0x457/0x750 [ 255.386069][ C0] vfs_write+0x2a0/0x1150 [ 255.392122][ C0] ksys_write+0x1f8/0x250 [ 255.398174][ C0] do_syscall_64+0xcd/0x4c0 [ 255.404403][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.412018][ C0] } [ 255.414582][ C0] ... key at: [] __key.1+0x0/0x40 [ 255.421770][ C0] ... acquired at: [ 255.425638][ C0] _raw_spin_lock+0x2e/0x40 [ 255.430301][ C0] evdev_pass_values+0x10e/0x9b0 [ 255.435397][ C0] evdev_events+0x1bb/0x390 [ 255.440059][ C0] input_pass_values+0x6c4/0x890 [ 255.445182][ C0] input_handle_event+0xf00/0x14d0 [ 255.450484][ C0] input_inject_event+0x1cd/0x390 [ 255.455688][ C0] evdev_write+0x457/0x750 [ 255.460273][ C0] vfs_write+0x2a0/0x1150 [ 255.464767][ C0] ksys_write+0x1f8/0x250 [ 255.469256][ C0] do_syscall_64+0xcd/0x4c0 [ 255.473924][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.479974][ C0] [ 255.482279][ C0] -> (&dev->event_lock#2){..-.}-{3:3} { [ 255.487832][ C0] IN-SOFTIRQ-W at: [ 255.491796][ C0] lock_acquire+0x179/0x350 [ 255.497959][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 255.504795][ C0] input_event+0x70/0xb0 [ 255.510682][ C0] atp_complete_geyser_3_4+0xa2c/0x16f0 [ 255.517888][ C0] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 255.524902][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 255.531754][ C0] dummy_timer+0x180e/0x3a20 [ 255.537986][ C0] __hrtimer_run_queues+0x202/0xad0 [ 255.544837][ C0] hrtimer_run_softirq+0x17d/0x350 [ 255.551583][ C0] handle_softirqs+0x216/0x8e0 [ 255.557981][ C0] __irq_exit_rcu+0x109/0x170 [ 255.564294][ C0] irq_exit_rcu+0x9/0x30 [ 255.570183][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 255.577455][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 255.585069][ C0] _raw_spin_unlock_irqrestore+0x31/0x80 [ 255.592343][ C0] kthread_queue_work+0xa8/0x170 [ 255.598920][ C0] synchronize_rcu_expedited+0x2f4/0x460 [ 255.606188][ C0] mousedev_release+0x150/0x1f0 [ 255.612694][ C0] __fput+0x3ff/0xb70 [ 255.618307][ C0] fput_close_sync+0x118/0x260 [ 255.624705][ C0] __x64_sys_close+0x8b/0x120 [ 255.631016][ C0] do_syscall_64+0xcd/0x4c0 [ 255.637176][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.644729][ C0] INITIAL USE at: [ 255.648614][ C0] lock_acquire+0x179/0x350 [ 255.654676][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 255.661430][ C0] input_inject_event+0x9f/0x390 [ 255.667923][ C0] led_set_brightness+0x217/0x290 [ 255.674494][ C0] kbd_led_trigger_activate+0xcb/0x110 [ 255.681506][ C0] led_trigger_set+0x59a/0xc50 [ 255.687818][ C0] led_trigger_set_default+0x1e0/0x2e0 [ 255.694826][ C0] led_classdev_register_ext+0x7b8/0xa10 [ 255.702008][ C0] input_leds_connect+0x552/0x8e0 [ 255.708577][ C0] input_attach_handler.isra.0+0x181/0x260 [ 255.715935][ C0] input_register_device+0xa84/0x1130 [ 255.722856][ C0] atkbd_connect+0x5da/0xa20 [ 255.728998][ C0] serio_driver_probe+0x74/0xb0 [ 255.735413][ C0] really_probe+0x241/0xa90 [ 255.741469][ C0] __driver_probe_device+0x1de/0x440 [ 255.748308][ C0] driver_probe_device+0x4c/0x1b0 [ 255.754884][ C0] __driver_attach+0x283/0x580 [ 255.761198][ C0] bus_for_each_dev+0x13b/0x1d0 [ 255.767593][ C0] serio_handle_event+0x247/0xa50 [ 255.774168][ C0] process_one_work+0x9cc/0x1b70 [ 255.780653][ C0] worker_thread+0x6c8/0xf10 [ 255.786787][ C0] kthread+0x3c2/0x780 [ 255.792400][ C0] ret_from_fork+0x5d4/0x6f0 [ 255.798541][ C0] ret_from_fork_asm+0x1a/0x30 [ 255.804859][ C0] } [ 255.807337][ C0] ... key at: [] __key.7+0x0/0x40 [ 255.814453][ C0] ... acquired at: [ 255.818235][ C0] __lock_acquire+0x8a5/0x1c90 [ 255.823161][ C0] lock_acquire+0x179/0x350 [ 255.827829][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 255.833190][ C0] input_event+0x70/0xb0 [ 255.837594][ C0] atp_complete_geyser_3_4+0xa2c/0x16f0 [ 255.843318][ C0] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 255.848875][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 255.854247][ C0] dummy_timer+0x180e/0x3a20 [ 255.859007][ C0] __hrtimer_run_queues+0x202/0xad0 [ 255.864365][ C0] hrtimer_run_softirq+0x17d/0x350 [ 255.869654][ C0] handle_softirqs+0x216/0x8e0 [ 255.874576][ C0] __irq_exit_rcu+0x109/0x170 [ 255.879411][ C0] irq_exit_rcu+0x9/0x30 [ 255.883825][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 255.889619][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 255.895760][ C0] _raw_spin_unlock_irqrestore+0x31/0x80 [ 255.901555][ C0] kthread_queue_work+0xa8/0x170 [ 255.906658][ C0] synchronize_rcu_expedited+0x2f4/0x460 [ 255.912446][ C0] mousedev_release+0x150/0x1f0 [ 255.917458][ C0] __fput+0x3ff/0xb70 [ 255.921611][ C0] fput_close_sync+0x118/0x260 [ 255.926528][ C0] __x64_sys_close+0x8b/0x120 [ 255.931361][ C0] do_syscall_64+0xcd/0x4c0 [ 255.936028][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.942077][ C0] [ 255.944384][ C0] [ 255.944384][ C0] stack backtrace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 255.950253][ C0] CPU: 0 UID: 0 PID: 5169 Comm: acpid Not tainted 6.16.0-rc3-syzkaller-00233-g35e261cd95dd #0 PREEMPT(full) [ 255.950273][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 255.950283][ C0] Call Trace: [ 255.950288][ C0] [ 255.950294][ C0] dump_stack_lvl+0x116/0x1f0 [ 255.950316][ C0] print_irq_inversion_bug.part.0+0x212/0x270 [ 255.950342][ C0] mark_lock+0x2e5/0x610 [ 255.950367][ C0] __lock_acquire+0x8a5/0x1c90 [ 255.950390][ C0] ? __lock_acquire+0xb8a/0x1c90 [ 255.950414][ C0] lock_acquire+0x179/0x350 [ 255.950436][ C0] ? input_event+0x70/0xb0 [ 255.950457][ C0] _raw_spin_lock_irqsave+0x3a/0x60 [ 255.950476][ C0] ? input_event+0x70/0xb0 [ 255.950493][ C0] input_event+0x70/0xb0 [ 255.950512][ C0] atp_complete_geyser_3_4+0xa2c/0x16f0 [ 255.950537][ C0] ? find_held_lock+0x2b/0x80 [ 255.950555][ C0] ? __pfx_atp_complete_geyser_3_4+0x10/0x10 [ 255.950583][ C0] __usb_hcd_giveback_urb+0x38d/0x6e0 [ 255.950604][ C0] usb_hcd_giveback_urb+0x39b/0x450 [ 255.950626][ C0] dummy_timer+0x180e/0x3a20 [ 255.950659][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 255.950682][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 255.950703][ C0] ? mark_held_locks+0x49/0x80 [ 255.950729][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 255.950750][ C0] ? __pfx_dummy_timer+0x10/0x10 [ 255.950772][ C0] __hrtimer_run_queues+0x202/0xad0 [ 255.950791][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 255.950807][ C0] ? read_tsc+0x9/0x20 [ 255.950827][ C0] hrtimer_run_softirq+0x17d/0x350 [ 255.950844][ C0] handle_softirqs+0x216/0x8e0 [ 255.950863][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 255.950882][ C0] __irq_exit_rcu+0x109/0x170 [ 255.950899][ C0] irq_exit_rcu+0x9/0x30 [ 255.950915][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 255.950935][ C0] [ 255.950940][ C0] [ 255.950945][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 255.950963][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x31/0x80 [ 255.950988][ C0] Code: f5 53 48 8b 74 24 10 48 89 fb 48 83 c7 18 e8 36 00 15 f6 48 89 df e8 1e 54 15 f6 f7 c5 00 02 00 00 75 23 9c 58 f6 c4 02 75 37 01 00 00 00 e8 55 74 05 f6 65 8b 05 4e 6a 49 08 85 c0 74 16 5b [ 255.951004][ C0] RSP: 0018:ffffc90003dcfc80 EFLAGS: 00000246 [ 255.951017][ C0] RAX: 0000000000000002 RBX: ffff88814042f108 RCX: 0000000000000006 [ 255.951027][ C0] RDX: 0000000000000000 RSI: ffffffff8de1a526 RDI: ffffffff8c157ee0 [ 255.951037][ C0] RBP: 0000000000000293 R08: 0000000000000001 R09: 0000000000000001 [ 255.951046][ C0] R10: ffffffff90a81657 R11: 0000000000000001 R12: 0000000000000293 [ 255.951056][ C0] R13: ffff88814042f108 R14: 0000000000000000 R15: ffff888032dcd818 [ 255.951071][ C0] kthread_queue_work+0xa8/0x170 [ 255.951095][ C0] synchronize_rcu_expedited+0x2f4/0x460 [ 255.951110][ C0] ? __pfx_synchronize_rcu_expedited+0x10/0x10 [ 255.951128][ C0] ? __pfx_wait_rcu_exp_gp+0x10/0x10 [ 255.951145][ C0] mousedev_release+0x150/0x1f0 [ 255.951161][ C0] ? __pfx_mousedev_release+0x10/0x10 [ 255.951176][ C0] __fput+0x3ff/0xb70 [ 255.951191][ C0] fput_close_sync+0x118/0x260 [ 255.951205][ C0] ? __pfx_fput_close_sync+0x10/0x10 [ 255.951219][ C0] ? dnotify_flush+0x79/0x4c0 [ 255.951244][ C0] __x64_sys_close+0x8b/0x120 [ 255.951259][ C0] do_syscall_64+0xcd/0x4c0 [ 255.951281][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 255.951296][ C0] RIP: 0033:0x7f2888ae4407 [ 255.951308][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 255.951322][ C0] RSP: 002b:00007ffc34c075d0 EFLAGS: 00000202 ORIG_RAX: 0000000000000003 [ 255.951336][ C0] RAX: ffffffffffffffda RBX: 00007f2888a5a740 RCX: 00007f2888ae4407 [ 255.951346][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000000000000a [ 255.951355][ C0] RBP: 00007ffc34c07790 R08: 0000000000000000 R09: 0000000000000000 [ 255.951364][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000080 [ 255.951373][ C0] R13: 00007ffc34c07890 R14: 000055f29b4007fe R15: 00007ffc34c07890 [ 255.951387][ C0] [ 255.951873][ T30] audit: type=1400 audit(1751070038.448:4690): avc: denied { write } for pid=5797 comm="syz-executor" path="pipe:[4470]" dev="pipefs" ino=4470 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:sshd_t tclass=fifo_file permissive=1 [ 255.963403][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.380497][ C0] vkms_vblank_simulate: vblank timer overrun [ 256.388737][ T5813] Bluetooth: hci4: command tx timeout [ 256.394205][ T5813] Bluetooth: hci0: command tx timeout [ 256.410081][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.416587][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.424794][ T10] usb 4-1: USB disconnect, device number 26 [ 256.430741][ C0] appletouch 4-1:0.85: atp_complete: usb_submit_urb failed with result -19 [ 256.510648][ T10] appletouch 4-1:0.85: input: appletouch disconnected [ 256.520260][ T5944] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 257.752630][ T36] netdevsim netdevsim6 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.813083][ T36] netdevsim netdevsim6 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.872454][ T36] netdevsim netdevsim6 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.923012][ T36] netdevsim netdevsim6 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.985362][ T36] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.022748][ T36] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.072635][ T36] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.143698][ T36] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.203150][ T36] bridge_slave_1: left allmulticast mode [ 258.208797][ T36] bridge_slave_1: left promiscuous mode [ 258.214475][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.222318][ T36] bridge_slave_0: left allmulticast mode [ 258.227945][ T36] bridge_slave_0: left promiscuous mode [ 258.233778][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.241966][ T36] bridge_slave_1: left allmulticast mode [ 258.247601][ T36] bridge_slave_1: left promiscuous mode [ 258.254056][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.261819][ T36] bridge_slave_0: left allmulticast mode [ 258.267437][ T36] bridge_slave_0: left promiscuous mode [ 258.273140][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.281356][ T36] bridge_slave_1: left allmulticast mode [ 258.287006][ T36] bridge_slave_1: left promiscuous mode [ 258.292678][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.300292][ T36] bridge_slave_0: left allmulticast mode [ 258.306121][ T36] bridge_slave_0: left promiscuous mode [ 258.311804][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.319839][ T36] bridge_slave_0: left allmulticast mode [ 258.325780][ T36] bridge_slave_0: left promiscuous mode [ 258.331805][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.340010][ T36] bridge_slave_1: left allmulticast mode [ 258.345767][ T36] bridge_slave_1: left promiscuous mode [ 258.351440][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.359298][ T36] bridge_slave_0: left allmulticast mode [ 258.365497][ T36] bridge_slave_0: left promiscuous mode [ 258.371706][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.455755][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.465211][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.474672][ T36] bond0 (unregistering): Released all slaves [ 258.553752][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.563214][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.572364][ T36] bond0 (unregistering): Released all slaves [ 258.615664][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.625075][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.635542][ T36] bond0 (unregistering): Released all slaves [ 258.714925][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.724370][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.733477][ T36] bond0 (unregistering): Released all slaves [ 258.869531][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.878941][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.888037][ T36] bond0 (unregistering): Released all slaves [ 258.965192][ T36] bond1 (unregistering): Released all slaves [ 259.239964][ T36] hsr_slave_0: left promiscuous mode [ 259.247272][ T36] hsr_slave_1: left promiscuous mode [ 259.252854][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.260199][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.269023][ T36] hsr_slave_0: left promiscuous mode [ 259.274725][ T36] hsr_slave_1: left promiscuous mode [ 259.280197][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.288192][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.297450][ T36] hsr_slave_0: left promiscuous mode [ 259.303028][ T36] hsr_slave_1: left promiscuous mode [ 259.308699][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.316630][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.325891][ T36] hsr_slave_0: left promiscuous mode [ 259.331438][ T36] hsr_slave_1: left promiscuous mode [ 259.336932][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.344570][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.352017][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.359372][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.367995][ T36] hsr_slave_0: left promiscuous mode [ 259.373873][ T36] hsr_slave_1: left promiscuous mode [ 259.379326][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.386780][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.394324][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.402072][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.413791][ T36] veth1_macvtap: left promiscuous mode [ 259.419277][ T36] veth0_macvtap: left promiscuous mode [ 259.424811][ T36] veth1_vlan: left promiscuous mode [ 259.430021][ T36] veth0_vlan: left promiscuous mode [ 259.435697][ T36] veth1_macvtap: left promiscuous mode [ 259.441232][ T36] veth0_macvtap: left promiscuous mode [ 259.565875][ T36] team0 (unregistering): Port device team_slave_1 removed [ 259.585579][ T36] team0 (unregistering): Port device team_slave_0 removed [ 259.703151][ T36] team0 (unregistering): Port device team_slave_1 removed [ 259.724041][ T36] team0 (unregistering): Port device team_slave_0 removed [ 259.835767][ T36] team0 (unregistering): Port device team_slave_1 removed [ 259.847028][ T36] team0 (unregistering): Port device team_slave_0 removed [ 259.972817][ T36] team0 (unregistering): Port device team_slave_1 removed [ 259.993605][ T36] team0 (unregistering): Port device team_slave_0 removed [ 260.125388][ T36] team0 (unregistering): Port device team_slave_1 removed [ 260.146260][ T36] team0 (unregistering): Port device team_slave_0 removed [ 261.316622][ T36] IPVS: stop unused estimator thread 0...